Die vorliegende Übersetzung wurde maschinell erstellt. Im Falle eines Konflikts oder eines Widerspruchs zwischen dieser übersetzten Fassung und der englischen Fassung (einschließlich infolge von Verzögerungen bei der Übersetzung) ist die englische Fassung maßgeblich.
ACM-API-Aktionen, die bei der Protokollierung unterstützt werden CloudTrail
ACM unterstützt die Protokollierung der folgenden Aktionen als Ereignisse in CloudTrail Protokolldateien:
Jeder Ereignis- oder Protokolleintrag enthält Informationen zu dem Benutzer, der die Anforderung generiert hat. Die Identitätsinformationen unterstützen Sie bei der Ermittlung der folgenden Punkte:
-
Ob die Anfrage mit Root-Benutzer des AWS-Kontos oder AWS Identity and Access Management (IAM-) Benutzeranmeldedaten gestellt wurde.
-
Gibt an, ob die Anforderung mit temporären Sicherheitsanmeldeinformationen für eine Rolle oder einen Verbundbenutzer gesendet wurde.
-
Ob die Anfrage von einem anderen AWS Dienst gestellt wurde
Weitere Informationen finden Sie unter CloudTrail userIdentity-Element.
ACM zeichnet Verwaltungsereignisse und Datenereignisse in auf CloudTrail.
Verwaltungsereignisse
-
Hinzufügen von Tags zu einem Zertifikat (AddTagsToCertificate)
-
Erstellen einer ACME-Domänenvalidierung (CreateAcmeDomainValidation)
-
Erstellen einer externen ACME-Kontobindung (CreateAcmeExternalAccountBinding)
-
Löschen einer ACME-Domänenvalidierung (DeleteAcmeDomainValidation)
-
Löschen einer externen ACME-Kontobindung (DeleteAcmeExternalAccountBinding)
-
Beschreibung einer ACME-Domänenvalidierung (DescribeAcmeDomainValidation)
-
Beschreibung einer externen ACME-Kontobindung (DescribeAcmeExternalAccountBinding)
-
Auflistung der ACME-Domänenvalidierungen (ListAcmeDomainValidations)
-
Auflistung der externen ACME-Kontobindungen (ListAcmeExternalAccountBindings)
-
Tags aus einem Zertifikat entfernen (RemoveTagsFromCertificate)
-
Widerrufen einer externen ACME-Kontobindung (RevokeAcmeExternalAccountBinding)
-
Aktualisierung einer ACME-Domänenvalidierung (UpdateAcmeDomainValidation)
Datenereignisse
Verwaltungsereignisse
ACM protokolliert die folgenden Vorgänge als CloudTrail Verwaltungsereignisse. Verwaltungsereignisse werden standardmäßig protokolliert.
Hinzufügen von Tags zu einem Zertifikat (AddTagsToCertificate)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines AddTagsToCertificateAPI-Aufrufs.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-04-06T13:53:53Z",
"eventSource":"acm.amazonaws.com",
"eventName":"AddTagsToCertificate",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.10.16",
"requestParameters":{
"tags":[
{
"value":"Alice",
"key":"Admin"
}
],
"certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/fedcba98-7654-3210-fedc-ba9876543210"
},
"responseElements":null,
"requestID":"fedcba98-7654-3210-fedc-ba9876543210",
"eventID":"fedcba98-7654-3210-fedc-ba9876543210",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}
]
}Ändern eines ACME-Kontoschlüssels (ChangeAccountKey)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den ChangeAccountKey Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:29:57Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "ChangeAccountKey",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"innerJws": "EXAMPLE"
},
"responseElements": {
"location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
"status": "valid",
"orders": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/orders"
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Erstellen einer ACME-Domänenvalidierung (CreateAcmeDomainValidation)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den CreateAcmeDomainValidation Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:45Z",
"eventSource": "acm.amazonaws.com",
"eventName": "CreateAcmeDomainValidation",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"idempotencyToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"domainName": "example.com",
"prevalidationOptions": {
"dnsPrevalidation": {
"domainScope": {
"exactDomain": "ENABLED"
},
"hostedZoneId": "Z00443972VKAL6HT44MI"
}
}
},
"responseElements": {
"acmeDomainValidationArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeDomainValidation",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Einen ACME-Endpunkt erstellen (CreateAcmeEndpoint)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den CreateAcmeEndpoint Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:45Z",
"eventSource": "acm.amazonaws.com",
"eventName": "CreateAcmeEndpoint",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"idempotencyToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"authorizationBehavior": "PRE_APPROVED",
"certificateAuthority": {
"publicCertificateAuthority": {
}
}
},
"responseElements": {
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Erstellen einer externen ACME-Kontobindung (CreateAcmeExternalAccountBinding)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den CreateAcmeExternalAccountBinding Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:45Z",
"eventSource": "acm.amazonaws.com",
"eventName": "CreateAcmeExternalAccountBinding",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"idempotencyToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"roleArn": "arn:aws:iam::123456789012:role/example-role",
"expiration": {
"value": 1,
"type": "DAYS"
}
},
"responseElements": {
"externalAccountBinding": {
"acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"roleArn": "arn:aws:iam::123456789012:role/example-role",
"expiresAt": "2026-06-11T20:28:45Z"
}
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeExternalAccountBinding",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Löschen einer ACME-Domänenvalidierung (DeleteAcmeDomainValidation)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den DeleteAcmeDomainValidation Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:45Z",
"eventSource": "acm.amazonaws.com",
"eventName": "DeleteAcmeDomainValidation",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeDomainValidationArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeDomainValidation",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Löschen eines ACME-Endpunkts (DeleteAcmeEndpoint)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den DeleteAcmeEndpoint Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:45Z",
"eventSource": "acm.amazonaws.com",
"eventName": "DeleteAcmeEndpoint",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Löschen einer externen ACME-Kontobindung (DeleteAcmeExternalAccountBinding)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den DeleteAcmeExternalAccountBinding Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:45Z",
"eventSource": "acm.amazonaws.com",
"eventName": "DeleteAcmeExternalAccountBinding",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeExternalAccountBinding",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Löschen eines Zertifikats (DeleteCertificate)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines DeleteCertificateAPI-Aufrufs.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-03-18T00:00:26Z",
"eventSource":"acm.amazonaws.com",
"eventName":"DeleteCertificate",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.9.15",
"requestParameters":{
"certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/fedcba98-7654-3210-fedc-ba9876543210"
},
"responseElements":null,
"requestID":"01234567-89ab-cdef-0123-456789abcdef",
"eventID":"01234567-89ab-cdef-0123-456789abcdef",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}
]
}Beschreibung eines ACME-Kontos (DescribeAcmeAccount)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den DescribeAcmeAccount Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:46Z",
"eventSource": "acm.amazonaws.com",
"eventName": "DescribeAcmeAccount",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"accountUrl": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Beschreibung einer ACME-Domänenvalidierung (DescribeAcmeDomainValidation)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den DescribeAcmeDomainValidation Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:29:37Z",
"eventSource": "acm.amazonaws.com",
"eventName": "DescribeAcmeDomainValidation",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeDomainValidationArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeDomainValidation",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Beschreibung eines ACME-Endpunkts (DescribeAcmeEndpoint)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den DescribeAcmeEndpoint Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:45Z",
"eventSource": "acm.amazonaws.com",
"eventName": "DescribeAcmeEndpoint",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Beschreibung einer externen ACME-Kontobindung (DescribeAcmeExternalAccountBinding)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den DescribeAcmeExternalAccountBinding Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:29:06Z",
"eventSource": "acm.amazonaws.com",
"eventName": "DescribeAcmeExternalAccountBinding",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeExternalAccountBinding",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Beschreibung eines Zertifikats (DescribeCertificate)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines DescribeCertificateAPI-Aufrufs.
Anmerkung
Das CloudTrail Protokoll für den DescribeCertificate Vorgang zeigt keine Informationen über das von Ihnen angegebene ACM-Zertifikat an. Sie können Informationen über das Zertifikat mithilfe der Konsole AWS Command Line Interface, der oder der DescribeCertificateAPI anzeigen.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-03-18T00:00:42Z",
"eventSource":"acm.amazonaws.com",
"eventName":"DescribeCertificate",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.9.15",
"requestParameters":{
"certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/fedcba98-7654-3210-fedc-ba9876543210"
},
"responseElements":null,
"requestID":"fedcba98-7654-3210-fedc-ba9876543210",
"eventID":"fedcba98-7654-3210-fedc-ba9876543210",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}
]
}Ein Zertifikat exportieren (ExportCertificate)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines ExportCertificateAPI-Aufrufs.
{
"Records":[
{
"version":"0",
"id":"01234567-89ab-cdef-0123-456789abcdef",
"detail-type":"AWS API Call via CloudTrail",
"source":"aws.acm",
"account":"123456789012",
"time":"2018-05-24T15:28:11Z",
"region":"us-east-1",
"resources":[
],
"detail":{
"eventVersion":"1.04",
"userIdentity":{
"type":"Root",
"principalId":"123456789012",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2018-05-24T15:28:11Z",
"eventSource":"acm.amazonaws.com",
"eventName":"ExportCertificate",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.15.4 Python/2.7.9 Windows/8 botocore/1.10.4",
"requestParameters":{
"certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012",
"passphrase": "HIDDEN_DUE_TO_SECURITY_REASONS"
},
"responseElements":{
"certificateChain":
"-----BEGIN CERTIFICATE-----
base64 certificate
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
base64 certificate
-----END CERTIFICATE-----",
"privateKey":"**********",
"certificate":
"-----BEGIN CERTIFICATE-----
base64 certificate
-----END CERTIFICATE-----",
"privateKey": "HIDDEN_DUE_TO_SECURITY_REASONS"
},
"requestID":"01234567-89ab-cdef-0123-456789abcdef",
"eventID":"fedcba98-7654-3210-fedc-ba9876543210",
"readOnly": false,
"eventType":"AwsApiCall"
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm.us-east-1.amazonaws.com"
},
"sessionCredentialFromConsole": "true"
}
Anmeldeinformationen für externe Kontobindungen werden abgerufen (GetAcmeExternalAccountBindingCredentials)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den GetAcmeExternalAccountBindingCredentials Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:29:26Z",
"eventSource": "acm.amazonaws.com",
"eventName": "GetAcmeExternalAccountBindingCredentials",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeExternalAccountBinding",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Ein Zertifikat wird abgerufen (GetCertificate)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines GetCertificateAPI-Aufrufs.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-03-18T00:00:41Z",
"eventSource":"acm.amazonaws.com",
"eventName":"GetCertificate",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.9.15",
"requestParameters":{
"certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012"
},
"responseElements":{
"certificateChain":
"-----BEGIN CERTIFICATE-----
Base64-encoded certificate chain
-----END CERTIFICATE-----",
"certificate":
"-----BEGIN CERTIFICATE-----
Base64-encoded certificate
-----END CERTIFICATE-----"
},
"requestID":"744dd891-ec9c-11e5-ac34-d1e4dfe1a11b",
"eventID":"7aa4f909-00dd-478a-9a00-b2709bcad2bb",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}
]
}Importieren Sie ein Zertifikat (ImportCertificate)
Das folgende Beispiel zeigt den CloudTrail Protokolleintrag, der einen Aufruf des ImportCertificateACM-API-Vorgangs aufzeichnet.
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::111122223333:user/Alice",
"accountId":"111122223333",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-10-04T16:01:30Z",
"eventSource":"acm.amazonaws.com",
"eventName":"ImportCertificate",
"awsRegion":"ap-southeast-2",
"sourceIPAddress":"54.240.193.129",
"userAgent":"Coral/Netty",
"requestParameters":{
"privateKey":{
"hb":[
"byte",
"byte",
"byte",
"..."
],
"offset":0,
"isReadOnly":false,
"bigEndian":true,
"nativeByteOrder":false,
"mark":-1,
"position":0,
"limit":1674,
"capacity":1674,
"address":0
},
"certificateChain":{
"hb":[
"byte",
"byte",
"byte",
"..."
],
"offset":0,
"isReadOnly":false,
"bigEndian":true,
"nativeByteOrder":false,
"mark":-1,
"position":0,
"limit":2105,
"capacity":2105,
"address":0
},
"certificate":{
"hb":[
"byte",
"byte",
"byte",
"..."
],
"offset":0,
"isReadOnly":false,
"bigEndian":true,
"nativeByteOrder":false,
"mark":-1,
"position":0,
"limit":2503,
"capacity":2503,
"address":0
}
},
"responseElements":{
"certificateArn":"arn:aws:acm:ap-southeast-2:111122223333:certificate/01234567-89ab-cdef-0123-456789abcdef"
},
"requestID":"01234567-89ab-cdef-0123-456789abcdef",
"eventID":"01234567-89ab-cdef-0123-456789abcdef",
"eventType":"AwsApiCall",
"recipientAccountId":"111122223333"
}Auflistung der ACME-Konten (ListAcmeAccounts)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den ListAcmeAccounts Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:29:37Z",
"eventSource": "acm.amazonaws.com",
"eventName": "ListAcmeAccounts",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Auflistung der ACME-Domänenvalidierungen (ListAcmeDomainValidations)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den Vorgang. ListAcmeDomainValidations
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:29:57Z",
"eventSource": "acm.amazonaws.com",
"eventName": "ListAcmeDomainValidations",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Auflisten von ACME-Endpunkten (ListAcmeEndpoints)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den ListAcmeEndpoints Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:56Z",
"eventSource": "acm.amazonaws.com",
"eventName": "ListAcmeEndpoints",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": null,
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": true,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Auflistung der externen ACME-Kontobindungen (ListAcmeExternalAccountBindings)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den ListAcmeExternalAccountBindings Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:29:15Z",
"eventSource": "acm.amazonaws.com",
"eventName": "ListAcmeExternalAccountBindings",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Zertifikate auflisten (ListCertificates)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines ListCertificatesAPI-Aufrufs.
Anmerkung
Das CloudTrail Protokoll für den ListCertificates Vorgang zeigt Ihre ACM-Zertifikate nicht an. Sie können die Zertifikatsliste mithilfe der Konsole AWS Command Line Interface, der oder der ListCertificatesAPI anzeigen.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-03-18T00:00:43Z",
"eventSource":"acm.amazonaws.com",
"eventName":"ListCertificates",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.9.15",
"requestParameters":{
"maxItems":1000,
"certificateStatuses":[
"ISSUED"
]
},
"responseElements":null,
"requestID":"74c99844-ec9c-11e5-ac34-d1e4dfe1a11b",
"eventID":"cdfe1051-88aa-4aa3-8c33-a325270bff21",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}
]
}Tags für ein Zertifikat auflisten (ListTagsForCertificate)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines ListTagsForCertificateAPI-Aufrufs.
Anmerkung
Das CloudTrail Protokoll für den ListTagsForCertificate Vorgang zeigt Ihre Tags nicht an. Sie können die Tagliste mithilfe der Konsole AWS Command Line Interface, der oder der ListTagsForCertificateAPI anzeigen.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-04-06T13:30:11Z",
"eventSource":"acm.amazonaws.com",
"eventName":"ListTagsForCertificate",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.10.16",
"requestParameters":{
"certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012"
},
"responseElements":null,
"requestID":"b010767f-fbfb-11e5-b596-79e9a97a2544",
"eventID":"32181be6-a4a0-48d3-8014-c0d972b5163b",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}
]
}Auflisten von Tags für eine Ressource (ListTagsForResource)
Das folgende Beispiel zeigt einen CloudTrail Protokolleintrag für die ListTagsForResourceAPI.
Das CloudTrail Protokoll für den ListTagsForResource Vorgang zeigt keine Tags in den Antwortelementen an.
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2026-01-15T20:43:00Z",
"eventSource":"acm.amazonaws.com",
"eventName":"ListTagsForResource",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/2.0",
"requestParameters":{
"resourceArn":"arn:aws:acm:us-east-1:123456789012:acme-endpoint/ep-abc123"
},
"responseElements":null,
"requestID":"fedcba98-7654-3210-fedc-ba9876543212",
"eventID":"12345678-1234-1234-1234-123456789014",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}Verwaltung eines ACME-Kontos (ManageAccount)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den ManageAccount Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:30:40Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "ManageAccount",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"accountId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": {
"location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
"status": "valid",
"contact": "HIDDEN_DUE_TO_SECURITY_REASONS",
"orders": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/orders"
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Registrierung eines ACME-Kontos (NewAccount)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den NewAccount Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:30:39Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "NewAccount",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"contact": "HIDDEN_DUE_TO_SECURITY_REASONS",
"externalAccountBinding": {
"jwsProtected": "EXAMPLE",
"payload": "EXAMPLE",
"signature": "EXAMPLE"
}
},
"responseElements": {
"location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
"status": "valid",
"contact": "HIDDEN_DUE_TO_SECURITY_REASONS",
"orders": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/orders",
"externalAccountBinding": {
"jwsProtected": "EXAMPLE",
"payload": "EXAMPLE",
"signature": "EXAMPLE"
},
"statusCode": 201
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Tags aus einem Zertifikat entfernen (RemoveTagsFromCertificate)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines RemoveTagsFromCertificateAPI-Aufrufs.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-04-06T14:10:01Z",
"eventSource":"acm.amazonaws.com",
"eventName":"RemoveTagsFromCertificate",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.10.16",
"requestParameters":{
"certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012",
"tags":[
{
"value":"Bob",
"key":"Admin"
}
]
},
"responseElements":null,
"requestID":"40ded461-fc01-11e5-a747-85804766d6c9",
"eventID":"0cfa142e-ef74-4b21-9515-47197780c424",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}
]
}Ein Zertifikat anfordern (RequestCertificate)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines RequestCertificateAPI-Aufrufs.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-03-18T00:00:49Z",
"eventSource":"acm.amazonaws.com",
"eventName":"RequestCertificate",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.9.15",
"requestParameters":{
"domainName":"example.com",
"validationMethod": "DNS",
"idempotencyToken":"8186023d89681c3ad5",
"options": {
"export": "ENABLED"
},
"keyAlgorithm": "RSA_2048"
},
"responseElements":{
"certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012"
},
"requestID":"77dacef3-ec9c-11e5-ac34-d1e4dfe1a11b",
"eventID":"a4954cdb-8f38-44c7-8927-a38ad4be3ac8",
"eventType":"AwsApiCall",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm.us-east-1.amazonaws.com"
},
"recipientAccountId":"123456789012"
}
]
}Bestätigungs-E-Mail erneut senden (ResendValidationEmail)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines ResendValidationEmailAPI-Aufrufs.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-03-17T23:58:25Z",
"eventSource":"acm.amazonaws.com",
"eventName":"ResendValidationEmail",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.9.15",
"requestParameters":{
"domain":"example.com",
"certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012",
"validationDomain":"example.com"
},
"responseElements":null,
"requestID":"23760b88-ec9c-11e5-b6f4-cb861a6f0a28",
"eventID":"41c11b06-ca91-4c1c-8c61-af349ea8bab8",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}
]
}Widerrufen eines ACME-Kontos (RevokeAcmeAccount)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den RevokeAcmeAccount Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:46Z",
"eventSource": "acm.amazonaws.com",
"eventName": "RevokeAcmeAccount",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"accountUrl": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Widerrufen einer externen ACME-Kontobindung (RevokeAcmeExternalAccountBinding)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den RevokeAcmeExternalAccountBinding Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:56Z",
"eventSource": "acm.amazonaws.com",
"eventName": "RevokeAcmeExternalAccountBinding",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeExternalAccountBinding",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Widerrufen Sie ein Zertifikat (RevokeCertificate)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines RevokeCertificateAPI-Aufrufs.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AIDACKCEVSQ6C2EXAMPLE:Role-Session-Name",
"arn": arn:aws:sts::111122223333:assumed-role/Role-Name/Role-Session-Name",
"accountId": "123456789012",
"accessKeyId": "AKIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AIDACKCEVSQ6C2EXAMPLE",
"arn": "arn:aws:iam::123456789012:role/Admin",
"accountId": "123456789012",
"userName": "Admin"
},
"attributes": {
"creationDate": "2016-01-01T19:35:52Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime":"2016-01-01T21:11:45Z",
"eventSource": "acm.amazonaws.com",
"eventName": "RevokeCertificate",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0",
"requestParameters": {
"certificateArn": "arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012",
"revocationReason": "UNSPECIFIED"
},
"responseElements": {
"certificateArn": "arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012"
},
"requestID": "01234567-89ab-cdef-0123-456789abcdef",
"eventID": "01234567-89ab-cdef-0123-456789abcdef",
"readOnly": false,
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm.us-east-1.amazonaws.com"
},
"sessionCredentialFromConsole": "true"
}Suchen nach Zertifikaten (SearchCertificates)
Das folgende CloudTrail Beispiel zeigt die Ergebnisse eines SearchCertificatesAPI-Aufrufs.
{
"Records":[
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2016-04-06T13:53:53Z",
"eventSource":"acm.amazonaws.com",
"eventName":"SearchCertificates",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/1.10.16",
"readOnly":true,
"requestParameters":{
"maxResults":10,
"sortBy":"CREATED_AT",
"sortOrder":"DESCENDING"
},
"responseElements":null,
"requestID":"01234567-89ab-cdef-0123-456789abcdef",
"eventID":"01234567-89ab-cdef-0123-456789abcdef",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}
]
}Eine Ressource taggen (TagResource)
Das folgende Beispiel zeigt einen CloudTrail Protokolleintrag für die TagResourceAPI.
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2026-01-15T20:41:00Z",
"eventSource":"acm.amazonaws.com",
"eventName":"TagResource",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/2.0",
"requestParameters":{
"resourceArn":"arn:aws:acm:us-east-1:123456789012:acme-endpoint/ep-abc123",
"tags":[
{
"key":"Environment",
"value":"Production"
}
]
},
"responseElements":null,
"requestID":"fedcba98-7654-3210-fedc-ba9876543210",
"eventID":"12345678-1234-1234-1234-123456789012",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}Tags aus einer Ressource entfernen (UntagResource)
Das folgende Beispiel zeigt einen CloudTrail Protokolleintrag für die UntagResourceAPI.
{
"eventVersion":"1.04",
"userIdentity":{
"type":"IAMUser",
"principalId":"AIDACKCEVSQ6C2EXAMPLE",
"arn":"arn:aws:iam::123456789012:user/Alice",
"accountId":"123456789012",
"accessKeyId":"AKIAIOSFODNN7EXAMPLE",
"userName":"Alice"
},
"eventTime":"2026-01-15T20:42:00Z",
"eventSource":"acm.amazonaws.com",
"eventName":"UntagResource",
"awsRegion":"us-east-1",
"sourceIPAddress":"192.0.2.0",
"userAgent":"aws-cli/2.0",
"requestParameters":{
"resourceArn":"arn:aws:acm:us-east-1:123456789012:acme-endpoint/ep-abc123",
"tagKeys":["Environment"]
},
"responseElements":null,
"requestID":"fedcba98-7654-3210-fedc-ba9876543211",
"eventID":"12345678-1234-1234-1234-123456789013",
"eventType":"AwsApiCall",
"recipientAccountId":"123456789012"
}Aktualisierung einer ACME-Domänenvalidierung (UpdateAcmeDomainValidation)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den UpdateAcmeDomainValidation Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:29:46Z",
"eventSource": "acm.amazonaws.com",
"eventName": "UpdateAcmeDomainValidation",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeDomainValidationArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeDomainValidation",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Aktualisierung eines ACME-Endpunkts (UpdateAcmeEndpoint)
Das folgende CloudTrail Beispiel zeigt einen Protokolleintrag für den UpdateAcmeEndpoint Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:28:43Z",
"mfaAuthenticated": "false"
}
}
},
"eventTime": "2026-06-10T20:28:56Z",
"eventSource": "acm.amazonaws.com",
"eventName": "UpdateAcmeEndpoint",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "123456789012",
"eventCategory": "Management",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
}
}Datenereignisse
ACM protokolliert die folgenden ACME-Protokollvorgänge als CloudTrail Datenereignisse. Im Gegensatz zu Verwaltungsereignissen werden Datenereignisse nicht standardmäßig protokolliert. Um sie aufzuzeichnen, konfigurieren Sie die Protokollierung von Datenereignissen in Ihrem CloudTrail Trail- oder Ereignisdatenspeicher.
Eine Bestellung abschließen () FinalizeOrder
Das folgende CloudTrail Beispiel zeigt einen Eintrag im Datenereignisprotokoll für den FinalizeOrder Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:29:27Z",
"mfaAuthenticated": "false"
},
"sourceIdentity": "acm-acme-a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"invokedBy": "acm-acme.amazonaws.com"
},
"eventTime": "2026-06-10T20:29:27Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "FinalizeOrder",
"awsRegion": "us-east-1",
"sourceIPAddress": "acm-acme.amazonaws.com",
"userAgent": "acm-acme.amazonaws.com",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"orderId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
"csr": "EXAMPLE"
},
"responseElements": {
"status": "processing",
"expires": "2026-06-17T20:29:27Z",
"identifiers": [
{
"type": "dns",
"value": "example.example.com"
}
],
"authorizations": [
"https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/authz/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333"
],
"finalize": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/order/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/finalize",
"location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/order/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
"statusCode": 200
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data"
}Ein Zertifikat wird heruntergeladen (GetCertificate)
Das folgende CloudTrail Beispiel zeigt einen Eintrag im Datenereignisprotokoll für den GetCertificate Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:29:56Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "GetCertificate",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"certId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE77777"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Das Verzeichnis () GetDirectory wird abgerufen
Das folgende CloudTrail Beispiel zeigt einen Eintrag im Datenereignisprotokoll für den GetDirectory Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:30:39Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "GetDirectory",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Eine Bestellung wird abgerufen () GetOrder
Das folgende CloudTrail Beispiel zeigt einen Eintrag im Datenereignisprotokoll für den GetOrder Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:30:38Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "GetOrder",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"orderId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Bestellungen auflisten (ListOrders)
Das folgende CloudTrail Beispiel zeigt einen Eintrag im Datenereignisprotokoll für den ListOrders Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:29:57Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "ListOrders",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"accountId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE88888"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
"readOnly": true,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Verwaltung einer Autorisierung (ManageAuthorization)
Das folgende CloudTrail Beispiel zeigt einen Eintrag im Datenereignisprotokoll für den ManageAuthorization Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:30:40Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "ManageAuthorization",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"authorizationId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE99999"
},
"responseElements": {
"location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/authz/a1b2c3d4-5678-90ab-cdef-EXAMPLE99999",
"status": "valid",
"expires": "2026-06-17T20:30:40Z",
"identifier": {
"type": "dns",
"value": "example.example.com"
},
"challenges": []
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Eine Nonce () NewNonce wird angefordert
Das folgende CloudTrail Beispiel zeigt einen Eintrag im Datenereignisprotokoll für den NewNonce Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:30:39Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "NewNonce",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Eine Bestellung erstellen (NewOrder)
Das folgende CloudTrail Beispiel zeigt einen Eintrag im Datenereignisprotokoll für den NewOrder Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "Unknown",
"principalId": "anonymous",
"arn": "anonymous",
"accountId": "123456789012",
"userName": "anonymous"
},
"eventTime": "2026-06-10T20:29:26Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "NewOrder",
"awsRegion": "us-east-1",
"sourceIPAddress": "192.0.2.0",
"userAgent": "aws-cli/2.0",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"identifiers": [
{
"type": "dns",
"value": "example.example.com"
}
]
},
"responseElements": {
"status": "ready",
"expires": "2026-06-17T20:29:26Z",
"identifiers": [
{
"type": "dns",
"value": "example.example.com"
}
],
"authorizations": [
"https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/authz/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333"
],
"finalize": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/order/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/finalize",
"location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/order/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
"statusCode": 201
},
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data",
"tlsDetails": {
"tlsVersion": "TLSv1.3",
"cipherSuite": "TLS_AES_128_GCM_SHA256",
"clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
}
}Widerrufen eines Zertifikats () RevokeCertificate
Das folgende CloudTrail Beispiel zeigt einen Eintrag im Datenereignisprotokoll für den RevokeCertificate Vorgang.
{
"eventVersion": "1.11",
"userIdentity": {
"type": "AssumedRole",
"principalId": "AROAEXAMPLEID:example-session",
"arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
"accountId": "123456789012",
"accessKeyId": "ASIAIOSFODNN7EXAMPLE",
"sessionContext": {
"sessionIssuer": {
"type": "Role",
"principalId": "AROAEXAMPLEID",
"arn": "arn:aws:iam::123456789012:role/example-role",
"accountId": "123456789012",
"userName": "example-role"
},
"attributes": {
"creationDate": "2026-06-10T20:30:37Z",
"mfaAuthenticated": "false"
},
"sourceIdentity": "acm-acme-a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
},
"invokedBy": "acm-acme.amazonaws.com"
},
"eventTime": "2026-06-10T20:30:37Z",
"eventSource": "acm-acme.amazonaws.com",
"eventName": "RevokeCertificate",
"awsRegion": "us-east-1",
"sourceIPAddress": "acm-acme.amazonaws.com",
"userAgent": "acm-acme.amazonaws.com",
"requestParameters": {
"serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
"certificate": "EXAMPLE"
},
"responseElements": null,
"requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
"eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
"readOnly": false,
"resources": [
{
"accountId": "123456789012",
"type": "AWS::CertificateManager::AcmeEndpoint",
"ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
}
],
"eventType": "AwsApiCall",
"managementEvent": false,
"recipientAccountId": "123456789012",
"eventCategory": "Data"
}