AWS acm documentation change
Summary
Added deletion policy note for ACME-issued certificates
Security assessment
Documents certificate retention policy, which relates to key lifecycle management. Helps prevent accidental deletion of active certificates.
Diff
diff --git a/acm/latest/userguide/gs-acm-delete.md b/acm/latest/userguide/gs-acm-delete.md index cd2c2b4ab..7d3057cdc 100644 --- a//acm/latest/userguide/gs-acm-delete.md +++ b//acm/latest/userguide/gs-acm-delete.md @@ -14,0 +15,2 @@ You can use the ACM console or the AWS CLI to delete a certificate. Deleting a t + * You can delete only _expired_ certificates issued through ACME (certificates with a `CertificateKeyPairOrigin` of `ACME`). An ACME certificate remains in your account until one year after it expires, when ACM automatically removes it. +