AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-07-01 · Documentation low

File: cli/latest/reference/acm/describe-certificate.md

Summary

Added new fields to Certificate structure: CertificateKeyPairOrigin, AcmeEndpointArn, and AcmeAccountId for ACME certificate management

Security assessment

Added documentation for ACME certificate management features which enhance certificate security through automated management. No evidence of addressing a specific vulnerability.

Diff

diff --git a/cli/latest/reference/acm/describe-certificate.md b/cli/latest/reference/acm/describe-certificate.md
index 8947416c9..3e5e90cb0 100644
--- a//cli/latest/reference/acm/describe-certificate.md
+++ b//cli/latest/reference/acm/describe-certificate.md
@@ -14,2 +14,2 @@
-  * [previous](delete-certificate.html "delete-certificate") |
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [previous](describe-acme-external-account-binding.html "describe-acme-external-account-binding") |
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »
@@ -22 +22 @@
-  * [← delete-certificate](delete-certificate.html "previous chapter \(use the left arrow\)") /
+  * [← describe-acme-external-account-binding](describe-acme-external-account-binding.html "previous chapter \(use the left arrow\)") /
@@ -889,0 +890,35 @@ Certificate -> (structure)
+> 
+> CertificateKeyPairOrigin -> (string)
+>
+>> The origin of the certificate’s key pair.
+>> 
+>> Possible values:
+>> 
+>>   * `AWS_MANAGED`
+>>   * `ACME`
+>>   * `CUSTOMER_PROVIDED`
+>> 
+
+> 
+> AcmeEndpointArn -> (string)
+>
+>> The ARN of the ACME endpoint used to issue the certificate.
+>> 
+>> Constraints:
+>> 
+>>   * min: `20`
+>>   * max: `2048`
+>>   * pattern: `arn:[\w+=/,.@-]+:acm:[\w+=/,.@-]*:[0-9]+:[\w+=,.@-]+(/[\w+=,.@-]+)*`
+>> 
+
+> 
+> AcmeAccountId -> (string)
+>
+>> The ACME account identifier associated with the certificate.
+>> 
+>> Constraints:
+>> 
+>>   * min: `36`
+>>   * max: `36`
+>> 
+
@@ -891 +926 @@ Certificate -> (structure)
-  * [← delete-certificate](delete-certificate.html "previous chapter \(use the left arrow\)") /
+  * [← describe-acme-external-account-binding](describe-acme-external-account-binding.html "previous chapter \(use the left arrow\)") /
@@ -900,2 +935,2 @@ Certificate -> (structure)
-  * [previous](delete-certificate.html "delete-certificate") |
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [previous](describe-acme-external-account-binding.html "describe-acme-external-account-binding") |
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »