AWS acm documentation change
Summary
Reduced ACME certificate issuance timeout guidance from 10 minutes to 2 minutes with corresponding client configuration update
Security assessment
Operational improvement reflecting faster certificate issuance times. No security vulnerability addressed or security features documented.
Diff
diff --git a/acm/latest/userguide/acm-acme-issuance.md b/acm/latest/userguide/acm-acme-issuance.md index 9add4a878..e055f4f33 100644 --- a//acm/latest/userguide/acm-acme-issuance.md +++ b//acm/latest/userguide/acm-acme-issuance.md @@ -55 +55 @@ This example shows how to register an ACME account and request a certificate usi -Certificate issuance through the ACM ACME endpoint can take several minutes. Configure your ACME client's issuance timeout to at least 600 seconds (10 minutes) to prevent the client from timing out before the certificate is delivered. Many ACME clients default to 30-90 seconds, which is not sufficient. +Certificate issuance through the ACM ACME endpoint can take up to two minutes. Configure your ACME client's issuance timeout to at least 120 seconds (2 minutes) to prevent the client from timing out before the certificate is delivered. Many ACME clients default to 30-90 seconds, which is not sufficient. @@ -68 +68 @@ Run the following command: - --issuance-timeout 600 \ + --issuance-timeout 120 \