AWS acm documentation change
Summary
Added CertificateIssuanceSuccess and CertificateIssuanceFailed metrics for ACME endpoints
Security assessment
New monitoring metrics for certificate issuance success/failure rates enhance security observability. Enables detection of issuance failures that could impact service availability.
Diff
diff --git a/acm/latest/userguide/cloudwatch-metrics.md b/acm/latest/userguide/cloudwatch-metrics.md index debfbcc18..f28afa5a3 100644 --- a//acm/latest/userguide/cloudwatch-metrics.md +++ b//acm/latest/userguide/cloudwatch-metrics.md @@ -9 +9 @@ -Amazon CloudWatch is a monitoring service for AWS resources. You can use CloudWatch to collect and track metrics, set alarms, and automatically react to changes in your AWS resources. ACM publishes metrics twice per day for every certificate in an account until expiration. +Amazon CloudWatch is a monitoring service for AWS resources. You can use CloudWatch to collect and track metrics, set alarms, and automatically react to changes in your AWS resources. @@ -11 +11 @@ Amazon CloudWatch is a monitoring service for AWS resources. You can use CloudWa -The `AWS/CertificateManager` namespace includes the following metric. +The `AWS/CertificateManager` namespace includes the following metrics. @@ -15 +15 @@ Metric | Description | Unit | Dimensions -`DaysToExpiry` | Number of days until a certificate expires. ACM stops publishing this metric after a certificate expires. | Integer | CertificateArn +`DaysToExpiry` | Number of days until a certificate expires. ACM publishes this metric twice per day for every certificate until expiration, and stops publishing it after a certificate expires. | Integer | CertificateArn @@ -19,0 +20,10 @@ Metric | Description | Unit | Dimensions +`CertificateIssuanceSuccess` | The number of certificates successfully issued through an ACME endpoint. ACM publishes a value of 1 for each successful issuance and 0 otherwise. | Count | AcmeEndpointArn + + * Value: ARN of the ACME endpoint + + +`CertificateIssuanceFailed` | The number of certificate issuance attempts that failed for an ACME endpoint. ACM publishes a value of 1 for each failed issuance and 0 otherwise. | Count | AcmeEndpointArn + + * Value: ARN of the ACME endpoint + +