AWS acm: Cross-reference ACME condition key values and permissions
Summary
Added a pointer to the ACME condition keys page describing values ACM sets and the additional acm:AddTagsToCertificate permission required by tagged endpoints.
Security assessment
Adds a cross-reference clarifying the IAM permissions (acm:AddTagsToCertificate) and condition key values needed for ACME issuance, which is authorization guidance rather than a specific vulnerability fix.
Evidence
+For the values ACM sets for each of those condition keys during ACME issuance, and for the additional `acm:AddTagsToCertificate` permission that an endpoint configured with certificate tags requires, see [Condition keys for ACME certificate requests](./acm-conditions-acme.html).
Diff
diff --git a/acm/latest/userguide/security-iam-acme.md b/acm/latest/userguide/security-iam-acme.md index 259f3ba68..8dd94764d 100644 --- a//acm/latest/userguide/security-iam-acme.md +++ b//acm/latest/userguide/security-iam-acme.md @@ -105,0 +106,2 @@ You can restrict issuance using the same condition keys supported by `acm:Reques +For the values ACM sets for each of those condition keys during ACME issuance, and for the additional `acm:AddTagsToCertificate` permission that an endpoint configured with certificate tags requires, see [Condition keys for ACME certificate requests](./acm-conditions-acme.html). +