Document history
The following table describes the documentation release history of AWS Certificate Manager beginning in 2018.
| Change | Description | Date |
|---|---|---|
ACM allows re-import of a certificate into the same ARN only when the ClientAuth EKU is missing from the previous certificate. This accommodates industry changes where certificate authorities no longer issue certificates with ClientAuth EKU to comply with Chrome's root program requirements. | October 22, 2025 | |
Added a note to the ACM certificate concept topic detailing changes to ACM certificate issuance with the TLS Web Client Authentication extension. | July 23, 2025 | |
Removed the reference to the TLS Web Client Authentication extension from the example certificate. | July 3, 2025 | |
You can export ACM public certificates. | June 17, 2025 | |
ACM now supports HTTP validation for domain ownership verification when issuing certificates for CloudFront distributions. | April 24, 2025 | |
The ACM console no longer supports mail exchanger (MX). | July 11, 2024 | |
Use account-level separation in your policies wherever possible. If not possible, you can restrict permissions at the account level or through encryption context condition keys in your policies. | June 11, 2024 | |
Added a note about the deprecation of WHOIS email verification starting in June 2024. | February 5, 2024 | |
Condition key support added | Added support for IAM Condition keys when requesting ACM certificates. For a list of supported conditions, see https://docs.aws.amazon.com/acm/latest/userguide/acm-conditions.html#acm-conditions-supported. | August 24, 2023 |
ECDSA support added | Added support for Elliptic Curve Digital Signature Algorithm (ECDSA) when requesting a public ACM certificate. For a list of supported key algorithms, see https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate.html#algorithms. | November 8, 2022 |
New CloudWatch Events | Added ACM Certificate Expired, ACM Certificate Available, and ACM Certificate Renewal Action Required events. For a list of supported CloudWatch Events, see https://docs.aws.amazon.com/acm/latest/userguide/cloudwatch-events.html. | October 27, 2022 |
Updating key algorithm types for import | Certificates imported into ACM may now have keys with additional RSA and Elliptic Curve algorithms. For a list of currently supported key algorithms, see https://docs.aws.amazon.com/acm/latest/userguide/import-certificate-prerequisites.html. | July 14, 2021 |
Promoting "Monitoring and Logging" as a separate chapter | Moved monitoring and logging documentation to its own chapter. This change covers CloudWatch Metrics, CloudWatch Events/EventBridge, and CloudTrail. For more information, see https://docs.aws.amazon.com/acm/latest/userguide/monitoring-and-logging.html. | March 23, 2021 |
Added CloudWatch Metrics and Events support | Added DaysToExpiry metric and event and supporting APIs. For more information, see https://docs.aws.amazon.com/acm/latest/userguide/cloudwatch-metrics.html and https://docs.aws.amazon.com/acm/latest/userguide/cloudwatch-events.html. | March 3, 2021 |
Added cross-account support | Added cross-account support for using private CAs from AWS Private CA. For more information, see https://docs.aws.amazon.com/acm/latest/userguide/ca-access.html. | August 17, 2020 |
Added region support | Added region support for the AWS China (Beijing and Ningxia) Regions. For a complete list of supported regions, see https://docs.aws.amazon.com/general/latest/gr/rande.html#acm-pca_region. | March 4, 2020 |
Added renewal workflow testing | Customers can now manually test the configuration of their ACM managed renewal workflow. For more information, see Testing ACM's Managed Renewal Configuration. | March 14, 2019 |
Certificate transparency logging now default | Added ability to publish ACM public certificates into certificate transparency logs by default. | April 24, 2018 |
Launching AWS Private CA | Launched ACM Private Certificate Manager (CM), and extension of AWS Certificate Manager that allows users to establish a secure managed infrastructure for issuing and revoking private digital certificates. For more information, see AWS Private Certificate Authority. | April 4, 2018 |
Certificate transparency logging | Added certificate transparency logging to Best Practices. | March 27, 2018 |
The following table describes the documentation release history of AWS Certificate Manager prior to 2018.
| Change | Description | Release Date |
|---|---|---|
| New content | Added DNS validation to AWS Certificate Manager DNS validation. | November 21, 2017 |
| New content | Added new Java code examples to Use AWS Certificate Manager with the SDK for Java. | October 12, 2017 |
| New content | Added information about CAA records to (Optional) Configure a CAA record. | September 21, 2017 |
| New content | Added information about .IO domains to Troubleshoot issues with AWS Certificate Manager. | July 07, 2017 |
| New content | Added information about reimporting a certificate to Reimport a certificate. | July 07, 2017 |
| New content | Added information about certificate pinning to Best practices and to Troubleshoot issues with AWS Certificate Manager. | July 07, 2017 |
| New content | Added AWS CloudFormation to Services integrated with ACM. | May 27, 2017 |
| Update | Added more information to Quotas. | May 27, 2017 |
| New content | Added documentation about Identity and Access Management for AWS Certificate Manager. | April 28, 2017 |
| Update | Added a graphic to show where validation email is sent. See AWS Certificate Manager email validation. | April 21, 2017 |
| Update | Added information about setting up email for your domain. See AWS Certificate Manager email validation. | April 6, 2017 |
| Update | Added information about checking certificate renewal status in the console. See Check a certificate's renewal status. | March 28, 2017 |
| Update | Updated the documentation for using Elastic Load Balancing. | March 21, 2017 |
| New content | Added support for AWS Elastic Beanstalk and Amazon API Gateway. See Services integrated with ACM. | March 21, 2017 |
| Update | Updated the documentation about Managed certificate renewal. | February 20, 2017 |
|
New content |
Added documentation about Imported certificates. |
October 13, 2016 |
|
New content |
Added AWS CloudTrail support for ACM actions. See Using CloudTrail with AWS Certificate Manager. |
March 25, 2016 |
|
New guide |
This release introduces AWS Certificate Manager. |
January 21, 2016 |