AWS acm documentation change

Service: acm · 2026-07-01 · Documentation low

File: acm/latest/userguide/supported-events.md

Summary

Added new fields to certificate event structures including CertificateKeyPairOrigin, AcmeAccountId, and AcmeEndpointArn for better certificate lifecycle tracking.

Security assessment

The added fields improve security observability by distinguishing certificate origins (AWS_MANAGED/ACME/CUSTOMER_PROVIDED) and linking ACME artifacts, enhancing audit capabilities. No vulnerability fix is indicated.

Diff

diff --git a/acm/latest/userguide/supported-events.md b/acm/latest/userguide/supported-events.md
index a5d16ca5b..b2cfa4688 100644
--- a//acm/latest/userguide/supported-events.md
+++ b//acm/latest/userguide/supported-events.md
@@ -35 +35,6 @@ _ACM Certificate Approaching Expiration_ events have the following structure.
-        "CommonName": "example.com"
+        "CommonName": "example.com",
+        "FirstSubjectAlternativeName": "example.com",
+        "ValidityInDays": 90,
+        "CertificateKeyPairOrigin": "AWS_MANAGED" | "ACME" | "CUSTOMER_PROVIDED",
+        "AcmeAccountId": "acme_account_id",
+        "AcmeEndpointArn": "arn:aws:acm:region:account:acme-endpoint/endpoint_ID"
@@ -63,0 +69,5 @@ _ACM Certificate Expired_ events have the following structure.
+            "FirstSubjectAlternativeName": "example.com",
+            "ValidityInDays": 90,
+            "CertificateKeyPairOrigin": "AWS_MANAGED" | "ACME" | "CUSTOMER_PROVIDED",
+            "AcmeAccountId": "acme_account_id",
+            "AcmeEndpointArn": "arn:aws:acm:region:account:acme-endpoint/endpoint_ID",
@@ -94,0 +105,5 @@ _ACM Certificate Available_ events have the following structure.
+           "FirstSubjectAlternativeName": "example.com",
+           "ValidityInDays": 90,
+           "CertificateKeyPairOrigin": "AWS_MANAGED" | "ACME" | "CUSTOMER_PROVIDED",
+           "AcmeAccountId": "acme_account_id",
+           "AcmeEndpointArn": "arn:aws:acm:region:account:acme-endpoint/endpoint_ID",
@@ -128,0 +144,3 @@ _ACM Certificate Renewal Action Required_ events have the following structure.
+           "FirstSubjectAlternativeName": "example.com",
+           "ValidityInDays": 90,
+           "CertificateKeyPairOrigin": "AWS_MANAGED",
@@ -162,0 +181,5 @@ _ACM Certificate Revoked_ events have the following structure.
+        "FirstSubjectAlternativeName": "example.com",
+        "ValidityInDays": 90,
+        "CertificateKeyPairOrigin": "AWS_MANAGED" | "ACME" | "CUSTOMER_PROVIDED",
+        "AcmeAccountId": "acme_account_id",
+        "AcmeEndpointArn": "arn:aws:acm:region:account:acme-endpoint/endpoint_ID",