View a markdown version of this page

CloudTrail 로깅에서 지원되는 ACM API 작업 - AWS Certificate Manager
관리 이벤트데이터 이벤트

기계 번역으로 제공되는 번역입니다. 제공된 번역과 원본 영어의 내용이 상충하는 경우에는 영어 버전이 우선합니다.

CloudTrail 로깅에서 지원되는 ACM API 작업

ACM은 CloudTrail 로그 파일에 다음 작업을 이벤트로 로깅합니다.

모든 이벤트 또는 로그 항목에는 요청을 생성했던 사용자에 관한 정보가 포함됩니다. ID 정보를 이용하면 다음을 쉽게 판단할 수 있습니다.

  • 요청이 AWS 계정 루트 사용자 또는 AWS Identity and Access Management (IAM) 사용자 자격 증명으로 이루어졌는지 여부입니다.

  • 역할 또는 페더레이션 사용자의 임시 자격 증명을 사용하여 요청이 생성되었는지 여부.

  • 요청이 다른 AWS 서비스에서 이루어졌는지 여부

자세한 설명은 CloudTrail userIdentity 요소를 참조하세요.

ACM은 CloudTrail에 관리 이벤트와 데이터 이벤트를 기록합니다.

관리 이벤트

데이터 이벤트

관리 이벤트

ACM은 다음 작업을 CloudTrail 관리 이벤트로 기록합니다. 관리 이벤트는 기본적으로 로깅됩니다.

인증서에 태그 추가(AddTagsToCertificate)

다음 CloudTrail 예에서는 AddTagsToCertificate API에 대한 호출의 결과를 보여 줍니다.

{

   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-04-06T13:53:53Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"AddTagsToCertificate",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.10.16",
         "requestParameters":{
            "tags":[
               {
                  "value":"Alice",
                  "key":"Admin"
               }
            ],
            "certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/fedcba98-7654-3210-fedc-ba9876543210"
         },
         "responseElements":null,
         "requestID":"fedcba98-7654-3210-fedc-ba9876543210",
         "eventID":"fedcba98-7654-3210-fedc-ba9876543210",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
      }
   ]
}

ACME 계정 키 변경(ChangeAccountKey)

다음 CloudTrail 예제는 ChangeAccountKey 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:29:57Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "ChangeAccountKey",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "innerJws": "EXAMPLE"
  },
  "responseElements": {
    "location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
    "status": "valid",
    "orders": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/orders"
  },
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

ACME 도메인 검증 생성(CreateAcmeDomainValidation)

다음 CloudTrail 예제는 CreateAcmeDomainValidation 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:45Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "CreateAcmeDomainValidation",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "idempotencyToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "domainName": "example.com",
    "prevalidationOptions": {
      "dnsPrevalidation": {
        "domainScope": {
          "exactDomain": "ENABLED"
        },
        "hostedZoneId": "Z00443972VKAL6HT44MI"
      }
    }
  },
  "responseElements": {
    "acmeDomainValidationArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    },
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeDomainValidation",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 엔드포인트 생성(CreateAcmeEndpoint)

다음 CloudTrail 예제는 CreateAcmeEndpoint 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:45Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "CreateAcmeEndpoint",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "idempotencyToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "authorizationBehavior": "PRE_APPROVED",
    "certificateAuthority": {
      "publicCertificateAuthority": {
      }
    }
  },
  "responseElements": {
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
  },
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 외부 계정 바인딩 생성(CreateAcmeExternalAccountBinding)

다음 CloudTrail 예제는 CreateAcmeExternalAccountBinding 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:45Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "CreateAcmeExternalAccountBinding",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "idempotencyToken": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "roleArn": "arn:aws:iam::123456789012:role/example-role",
    "expiration": {
      "value": 1,
      "type": "DAYS"
    }
  },
  "responseElements": {
    "externalAccountBinding": {
      "acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
      "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
      "roleArn": "arn:aws:iam::123456789012:role/example-role",
      "expiresAt": "2026-06-11T20:28:45Z"
    }
  },
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    },
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeExternalAccountBinding",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 도메인 검증 삭제(DeleteAcmeDomainValidation)

다음 CloudTrail 예제는 DeleteAcmeDomainValidation 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:45Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "DeleteAcmeDomainValidation",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeDomainValidationArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeDomainValidation",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 엔드포인트 삭제(DeleteAcmeEndpoint)

다음 CloudTrail 예제는 DeleteAcmeEndpoint 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:45Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "DeleteAcmeEndpoint",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 외부 계정 바인딩 삭제(DeleteAcmeExternalAccountBinding)

다음 CloudTrail 예제는 DeleteAcmeExternalAccountBinding 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:45Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "DeleteAcmeExternalAccountBinding",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeExternalAccountBinding",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

인증서 삭제(DeleteCertificate)

다음 CloudTrail 예에서는 DeleteCertificate API에 대한 호출의 결과를 보여 줍니다 

{

   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-03-18T00:00:26Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"DeleteCertificate",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.9.15",
         "requestParameters":{
            "certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/fedcba98-7654-3210-fedc-ba9876543210"
         },
         "responseElements":null,
         "requestID":"01234567-89ab-cdef-0123-456789abcdef",
         "eventID":"01234567-89ab-cdef-0123-456789abcdef",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
      }
   ]
}

ACME 계정 설명(DescribeAcmeAccount)

다음 CloudTrail 예제는 DescribeAcmeAccount 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:46Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "DescribeAcmeAccount",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "accountUrl": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 도메인 검증 설명(DescribeAcmeDomainValidation)

다음 CloudTrail 예제는 DescribeAcmeDomainValidation 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:29:37Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "DescribeAcmeDomainValidation",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeDomainValidationArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeDomainValidation",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 엔드포인트 설명(DescribeAcmeEndpoint)

다음 CloudTrail 예제는 DescribeAcmeEndpoint 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:45Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "DescribeAcmeEndpoint",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 외부 계정 바인딩 설명(DescribeAcmeExternalAccountBinding)

다음 CloudTrail 예제는 DescribeAcmeExternalAccountBinding 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:29:06Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "DescribeAcmeExternalAccountBinding",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeExternalAccountBinding",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

인증서 설명(DescribeCertificate)

다음 CloudTrail 예에서는 DescribeCertificate API에 대한 호출의 결과를 보여 줍니다.

참고

지정한 ACM 인증서에 대한 정보가 DescribeCertificate 작업에 대한 CloudTrail 로그에 표시되지 않습니다. 콘솔 AWS Command Line Interface, 또는 DescribeCertificate API를 사용하여 인증서에 대한 정보를 볼 수 있습니다.

{
   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-03-18T00:00:42Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"DescribeCertificate",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.9.15",
         "requestParameters":{
            "certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/fedcba98-7654-3210-fedc-ba9876543210"
         },
         "responseElements":null,
         "requestID":"fedcba98-7654-3210-fedc-ba9876543210",
         "eventID":"fedcba98-7654-3210-fedc-ba9876543210",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
      }
   ]
}

인증서 내보내기(ExportCertificate)

다음 CloudTrail 예에서는 ExportCertificate API에 대한 호출의 결과를 보여 줍니다.

{
   "Records":[
      {
         "version":"0",
         "id":"01234567-89ab-cdef-0123-456789abcdef",
         "detail-type":"AWS API Call via CloudTrail",
         "source":"aws.acm",
         "account":"123456789012",
         "time":"2018-05-24T15:28:11Z",
         "region":"us-east-1",
         "resources":[

         ],
         "detail":{
            "eventVersion":"1.04",
            "userIdentity":{
               "type":"Root",
               "principalId":"123456789012",
               "arn":"arn:aws:iam::123456789012:user/Alice",
               "accountId":"123456789012",
               "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
               "userName":"Alice"
            },
            "eventTime":"2018-05-24T15:28:11Z",
            "eventSource":"acm.amazonaws.com",
            "eventName":"ExportCertificate",
            "awsRegion":"us-east-1",
            "sourceIPAddress":"192.0.2.0",
            "userAgent":"aws-cli/1.15.4 Python/2.7.9 Windows/8 botocore/1.10.4",
            "requestParameters":{
              "certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012",
               "passphrase": "HIDDEN_DUE_TO_SECURITY_REASONS"
            },
            "responseElements":{
                "certificateChain":
                "-----BEGIN CERTIFICATE----- 
                base64 certificate 
                -----END CERTIFICATE-----               
                -----BEGIN CERTIFICATE----- 
                base64 certificate 
                -----END CERTIFICATE-----",
                "privateKey":"**********",
                "certificate": 
                "-----BEGIN CERTIFICATE----- 
                base64 certificate 
                -----END CERTIFICATE-----",
                "privateKey": "HIDDEN_DUE_TO_SECURITY_REASONS"
            },
            "requestID":"01234567-89ab-cdef-0123-456789abcdef",
            "eventID":"fedcba98-7654-3210-fedc-ba9876543210",
            "readOnly": false,
            "eventType":"AwsApiCall"
                "managementEvent": true,
                "recipientAccountId": "123456789012",
                "eventCategory": "Management",
                "tlsDetails": {
                     "tlsVersion": "TLSv1.3",
                     "cipherSuite": "TLS_AES_128_GCM_SHA256",
                     "clientProvidedHostHeader": "acm.us-east-1.amazonaws.com"
                 },
                 "sessionCredentialFromConsole": "true"
}

외부 계정 바인딩 자격 증명 검색(GetAcmeExternalAccountBindingCredentials)

다음 CloudTrail 예제는 GetAcmeExternalAccountBindingCredentials 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:29:26Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "GetAcmeExternalAccountBindingCredentials",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeExternalAccountBinding",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

인증서 검색(GetCertificate)

다음 CloudTrail 예에서는 GetCertificate API에 대한 호출의 결과를 보여 줍니다.

{

   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-03-18T00:00:41Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"GetCertificate",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.9.15",
         "requestParameters":{
            "certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012"
         },
         "responseElements":{
            "certificateChain":

            "-----BEGIN CERTIFICATE-----
            Base64-encoded certificate chain
            -----END CERTIFICATE-----",
            "certificate":
            "-----BEGIN CERTIFICATE-----
            Base64-encoded certificate
            -----END CERTIFICATE-----"

         },
         "requestID":"744dd891-ec9c-11e5-ac34-d1e4dfe1a11b",
         "eventID":"7aa4f909-00dd-478a-9a00-b2709bcad2bb",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
      }
   ]
}

인증서 가져오기(ImportCertificate)

다음 예에서는 ACM ImportCertificate API 작업에 대한 호출을 기록하는 CloudTrail 로그 항목을 보여줍니다.

{
   "eventVersion":"1.04",
   "userIdentity":{
      "type":"IAMUser",
      "principalId":"AIDACKCEVSQ6C2EXAMPLE",
      "arn":"arn:aws:iam::111122223333:user/Alice",
      "accountId":"111122223333",
      "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
      "userName":"Alice"
   },
   "eventTime":"2016-10-04T16:01:30Z",
   "eventSource":"acm.amazonaws.com",
   "eventName":"ImportCertificate",
   "awsRegion":"ap-southeast-2",
   "sourceIPAddress":"54.240.193.129",
   "userAgent":"Coral/Netty",
   "requestParameters":{
      "privateKey":{
         "hb":[
            "byte",
            "byte",
            "byte",
            "..."
         ],
         "offset":0,
         "isReadOnly":false,
         "bigEndian":true,
         "nativeByteOrder":false,
         "mark":-1,
         "position":0,
         "limit":1674,
         "capacity":1674,
         "address":0
      },
      "certificateChain":{
         "hb":[
            "byte",
            "byte",
            "byte",
            "..."
         ],
         "offset":0,
         "isReadOnly":false,
         "bigEndian":true,
         "nativeByteOrder":false,
         "mark":-1,
         "position":0,
         "limit":2105,
         "capacity":2105,
         "address":0
      },
      "certificate":{
         "hb":[
            "byte",
            "byte",
            "byte",
            "..."
         ],
         "offset":0,
         "isReadOnly":false,
         "bigEndian":true,
         "nativeByteOrder":false,
         "mark":-1,
         "position":0,
         "limit":2503,
         "capacity":2503,
         "address":0
      }
   },
   "responseElements":{
      "certificateArn":"arn:aws:acm:ap-southeast-2:111122223333:certificate/01234567-89ab-cdef-0123-456789abcdef"
   },
   "requestID":"01234567-89ab-cdef-0123-456789abcdef",
   "eventID":"01234567-89ab-cdef-0123-456789abcdef",
   "eventType":"AwsApiCall",
   "recipientAccountId":"111122223333"
}

ACME 계정 나열(ListAcmeAccounts)

다음 CloudTrail 예제는 ListAcmeAccounts 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:29:37Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "ListAcmeAccounts",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 도메인 검증 나열(ListAcmeDomainValidations)

다음 CloudTrail 예제는 ListAcmeDomainValidations 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:29:57Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "ListAcmeDomainValidations",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 엔드포인트 나열(ListAcmeEndpoints)

다음 CloudTrail 예제는 ListAcmeEndpoints 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:56Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "ListAcmeEndpoints",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": null,
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": true,
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 외부 계정 바인딩 나열(ListAcmeExternalAccountBindings)

다음 CloudTrail 예제는 ListAcmeExternalAccountBindings 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:29:15Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "ListAcmeExternalAccountBindings",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

인증서 나열(ListCertificates)

다음 CloudTrail 예에서는 ListCertificates API에 대한 호출의 결과를 보여 줍니다.

참고

ACM 인증서가 ListCertificates 작업에 대한 CloudTrail 로그에 표시되지 않습니다. 콘솔 AWS Command Line Interface, 또는 ListCertificates API를 사용하여 인증서 목록을 볼 수 있습니다.

{
   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-03-18T00:00:43Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"ListCertificates",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.9.15",
         "requestParameters":{
            "maxItems":1000,
            "certificateStatuses":[
               "ISSUED"
            ]
         },
         "responseElements":null,
         "requestID":"74c99844-ec9c-11e5-ac34-d1e4dfe1a11b",
         "eventID":"cdfe1051-88aa-4aa3-8c33-a325270bff21",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
      }
   ]
}

인증서의 태그 나열(ListTagsForCertificate)

다음 CloudTrail 예에서는 ListTagsForCertificate API에 대한 호출의 결과를 보여 줍니다.

참고

ListTagsForCertificate 작업에 대한 CloudTrail 로그에 태그가 표시되지 않습니다. 콘솔, AWS Command Line Interface또는 ListTagsForCertificate API를 사용하여 태그 목록을 볼 수 있습니다.

{
   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-04-06T13:30:11Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"ListTagsForCertificate",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.10.16",
         "requestParameters":{
            "certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012"
         },
         "responseElements":null,
         "requestID":"b010767f-fbfb-11e5-b596-79e9a97a2544",
         "eventID":"32181be6-a4a0-48d3-8014-c0d972b5163b",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
      }
   ]
}

리소스에 대한 태그 나열(ListTagsForResource)

다음 예제에서는 ListTagsForResource API에 대한 CloudTrail 로그 항목을 보여줍니다.

ListTagsForResource 작업에 대한 CloudTrail 로그는 응답 요소에 태그를 표시하지 않습니다.

{
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2026-01-15T20:43:00Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"ListTagsForResource",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/2.0",
         "requestParameters":{
            "resourceArn":"arn:aws:acm:us-east-1:123456789012:acme-endpoint/ep-abc123"
         },
         "responseElements":null,
         "requestID":"fedcba98-7654-3210-fedc-ba9876543212",
         "eventID":"12345678-1234-1234-1234-123456789014",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
}

ACME 계정 관리(ManageAccount)

다음 CloudTrail 예제는 ManageAccount 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:30:40Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "ManageAccount",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "accountId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": {
    "location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
    "status": "valid",
    "contact": "HIDDEN_DUE_TO_SECURITY_REASONS",
    "orders": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/orders"
  },
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

ACME 계정 등록(NewAccount)

다음 CloudTrail 예제는 NewAccount 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:30:39Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "NewAccount",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "contact": "HIDDEN_DUE_TO_SECURITY_REASONS",
    "externalAccountBinding": {
      "jwsProtected": "EXAMPLE",
      "payload": "EXAMPLE",
      "signature": "EXAMPLE"
    }
  },
  "responseElements": {
    "location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
    "status": "valid",
    "contact": "HIDDEN_DUE_TO_SECURITY_REASONS",
    "orders": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/orders",
    "externalAccountBinding": {
      "jwsProtected": "EXAMPLE",
      "payload": "EXAMPLE",
      "signature": "EXAMPLE"
    },
    "statusCode": 201
  },
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

인증서에서 태그 제거(RemoveTagsFromCertificate)

다음 CloudTrail 예에서는 RemoveTagsFromCertificate API에 대한 호출의 결과를 보여 줍니다.

{
   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-04-06T14:10:01Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"RemoveTagsFromCertificate",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.10.16",
         "requestParameters":{
            "certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012",
            "tags":[
               {
                  "value":"Bob",
                  "key":"Admin"
               }
            ]
         },
         "responseElements":null,
         "requestID":"40ded461-fc01-11e5-a747-85804766d6c9",
         "eventID":"0cfa142e-ef74-4b21-9515-47197780c424",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
      }
   ]
}

인증서 요청(RequestCertificate)

다음 CloudTrail 예에서는 RequestCertificate API에 대한 호출의 결과를 보여 줍니다.

{
   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-03-18T00:00:49Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"RequestCertificate",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.9.15",
         "requestParameters":{
            "domainName":"example.com",
            "validationMethod": "DNS",
            "idempotencyToken":"8186023d89681c3ad5",
            "options": {
            "export": "ENABLED"
        },
        "keyAlgorithm": "RSA_2048"
         },
         "responseElements":{
            "certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012"
         },
         "requestID":"77dacef3-ec9c-11e5-ac34-d1e4dfe1a11b",
         "eventID":"a4954cdb-8f38-44c7-8927-a38ad4be3ac8",
         "eventType":"AwsApiCall",
         "tlsDetails": {
           "tlsVersion": "TLSv1.3",
           "cipherSuite": "TLS_AES_128_GCM_SHA256",
           "clientProvidedHostHeader": "acm.us-east-1.amazonaws.com"
          },
         "recipientAccountId":"123456789012"
      }
   ]
}

검증 이메일 재전송(ResendValidationEmail)

다음 CloudTrail 예에서는 ResendValidationEmail API에 대한 호출의 결과를 보여 줍니다.

{
   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-03-17T23:58:25Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"ResendValidationEmail",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.9.15",
         "requestParameters":{
            "domain":"example.com",
            "certificateArn":"arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012",
            "validationDomain":"example.com"
         },
         "responseElements":null,
         "requestID":"23760b88-ec9c-11e5-b6f4-cb861a6f0a28",
         "eventID":"41c11b06-ca91-4c1c-8c61-af349ea8bab8",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
      }
   ]
}

ACME 계정 취소(RevokeAcmeAccount)

다음 CloudTrail 예제는 RevokeAcmeAccount 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:46Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "RevokeAcmeAccount",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "accountUrl": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acct/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 외부 계정 바인딩 취소(RevokeAcmeExternalAccountBinding)

다음 CloudTrail 예제는 RevokeAcmeExternalAccountBinding 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:56Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "RevokeAcmeExternalAccountBinding",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeExternalAccountBindingArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeExternalAccountBinding",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-external-account-binding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

인증서 취소(RevokeCertificate)

다음 CloudTrail 예제에서는 RevokeCertificate API를 호출한 결과를 보여 줍니다.

{
    "eventVersion": "1.11",
    "userIdentity": {
        "type": "AssumedRole",
        "principalId": "AIDACKCEVSQ6C2EXAMPLE:Role-Session-Name",
        "arn": arn:aws:sts::111122223333:assumed-role/Role-Name/Role-Session-Name",
        "accountId": "123456789012",
        "accessKeyId": "AKIAIOSFODNN7EXAMPLE",
        "sessionContext": {
            "sessionIssuer": {
                "type": "Role",
                "principalId": "AIDACKCEVSQ6C2EXAMPLE",
                "arn": "arn:aws:iam::123456789012:role/Admin",
                "accountId": "123456789012",
                "userName": "Admin"
            },
            "attributes": {
                "creationDate": "2016-01-01T19:35:52Z",
                "mfaAuthenticated": "false"
            }
        }
    },
    "eventTime":"2016-01-01T21:11:45Z",
    "eventSource": "acm.amazonaws.com",
    "eventName": "RevokeCertificate",
    "awsRegion": "us-east-1",
    "sourceIPAddress": "192.0.2.0",
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0",
    "requestParameters": {
        "certificateArn": "arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012",
        "revocationReason": "UNSPECIFIED"
    },
    "responseElements": {
        "certificateArn": "arn:aws:acm:us-east-1:123456789012:certificate/12345678-1234-1234-1234-123456789012"
    },
    "requestID": "01234567-89ab-cdef-0123-456789abcdef",
    "eventID": "01234567-89ab-cdef-0123-456789abcdef",
    "readOnly": false,
    "eventType": "AwsApiCall",
    "managementEvent": true,
    "recipientAccountId": "123456789012",
    "eventCategory": "Management",
    "tlsDetails": {
        "tlsVersion": "TLSv1.3",
        "cipherSuite": "TLS_AES_128_GCM_SHA256",
        "clientProvidedHostHeader": "acm.us-east-1.amazonaws.com"
    },
    "sessionCredentialFromConsole": "true"
}

다음 CloudTrail 예제는 SearchCertificates API에 대한 호출 결과를 보여줍니다.

{

   "Records":[
      {
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2016-04-06T13:53:53Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"SearchCertificates",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/1.10.16",
         "readOnly":true,
         "requestParameters":{
            "maxResults":10,
            "sortBy":"CREATED_AT",
            "sortOrder":"DESCENDING"
         },
         "responseElements":null,
         "requestID":"01234567-89ab-cdef-0123-456789abcdef",
         "eventID":"01234567-89ab-cdef-0123-456789abcdef",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
      }
   ]
}

리소스 태그 지정(TagResource)

다음 예제에서는 TagResource API에 대한 CloudTrail 로그 항목을 보여줍니다.

{
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2026-01-15T20:41:00Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"TagResource",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/2.0",
         "requestParameters":{
            "resourceArn":"arn:aws:acm:us-east-1:123456789012:acme-endpoint/ep-abc123",
            "tags":[
               {
                  "key":"Environment",
                  "value":"Production"
               }
            ]
         },
         "responseElements":null,
         "requestID":"fedcba98-7654-3210-fedc-ba9876543210",
         "eventID":"12345678-1234-1234-1234-123456789012",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
}

리소스에서 태그 제거(UntagResource)

다음 예제에서는 UntagResource API에 대한 CloudTrail 로그 항목을 보여줍니다.

{
         "eventVersion":"1.04",
         "userIdentity":{
            "type":"IAMUser",
            "principalId":"AIDACKCEVSQ6C2EXAMPLE",
            "arn":"arn:aws:iam::123456789012:user/Alice",
            "accountId":"123456789012",
            "accessKeyId":"AKIAIOSFODNN7EXAMPLE",
            "userName":"Alice"
         },
         "eventTime":"2026-01-15T20:42:00Z",
         "eventSource":"acm.amazonaws.com",
         "eventName":"UntagResource",
         "awsRegion":"us-east-1",
         "sourceIPAddress":"192.0.2.0",
         "userAgent":"aws-cli/2.0",
         "requestParameters":{
            "resourceArn":"arn:aws:acm:us-east-1:123456789012:acme-endpoint/ep-abc123",
            "tagKeys":["Environment"]
         },
         "responseElements":null,
         "requestID":"fedcba98-7654-3210-fedc-ba9876543211",
         "eventID":"12345678-1234-1234-1234-123456789013",
         "eventType":"AwsApiCall",
         "recipientAccountId":"123456789012"
}

ACME 도메인 검증 업데이트(UpdateAcmeDomainValidation)

다음 CloudTrail 예제는 UpdateAcmeDomainValidation 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:29:46Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "UpdateAcmeDomainValidation",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeDomainValidationArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeDomainValidation",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/acme-domain-validation/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

ACME 엔드포인트 업데이트(UpdateAcmeEndpoint)

다음 CloudTrail 예제는 UpdateAcmeEndpoint 작업에 대한 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:28:43Z",
        "mfaAuthenticated": "false"
      }
    }
  },
  "eventTime": "2026-06-10T20:28:56Z",
  "eventSource": "acm.amazonaws.com",
  "eventName": "UpdateAcmeEndpoint",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "acmeEndpointArn": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": true,
  "recipientAccountId": "123456789012",
  "eventCategory": "Management",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme.us-east-1.api.aws"
  }
}

데이터 이벤트

ACM은 다음 ACME 프로토콜 작업을 CloudTrail 데이터 이벤트로 로깅합니다. 관리 이벤트와 달리 데이터 이벤트는 기본적으로 로깅되지 않습니다. 이를 기록하려면 CloudTrail 추적 또는 이벤트 데이터 스토어에서 데이터 이벤트 로깅을 구성합니다.

주문 완료(FinalizeOrder)

다음 CloudTrail 예제는 FinalizeOrder 작업에 대한 데이터 이벤트 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:29:27Z",
        "mfaAuthenticated": "false"
      },
      "sourceIdentity": "acm-acme-a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    },
    "invokedBy": "acm-acme.amazonaws.com"
  },
  "eventTime": "2026-06-10T20:29:27Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "FinalizeOrder",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "acm-acme.amazonaws.com",
  "userAgent": "acm-acme.amazonaws.com",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "orderId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
    "csr": "EXAMPLE"
  },
  "responseElements": {
    "status": "processing",
    "expires": "2026-06-17T20:29:27Z",
    "identifiers": [
      {
        "type": "dns",
        "value": "example.example.com"
      }
    ],
    "authorizations": [
      "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/authz/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333"
    ],
    "finalize": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/order/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/finalize",
    "location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/order/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
    "statusCode": 200
  },
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": false,
  "recipientAccountId": "123456789012",
  "eventCategory": "Data"
}

인증서 다운로드(GetCertificate)

다음 CloudTrail 예제는 GetCertificate 작업에 대한 데이터 이벤트 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:29:56Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "GetCertificate",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "certId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE77777"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": false,
  "recipientAccountId": "123456789012",
  "eventCategory": "Data",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

디렉터리 검색(GetDirectory)

다음 CloudTrail 예제는 GetDirectory 작업에 대한 데이터 이벤트 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:30:39Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "GetDirectory",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": false,
  "recipientAccountId": "123456789012",
  "eventCategory": "Data",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

주문 검색(GetOrder)

다음 CloudTrail 예제는 GetOrder 작업에 대한 데이터 이벤트 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:30:38Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "GetOrder",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "orderId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": false,
  "recipientAccountId": "123456789012",
  "eventCategory": "Data",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

순서 나열(ListOrders)

다음 CloudTrail 예제는 ListOrders 작업에 대한 데이터 이벤트 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:29:57Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "ListOrders",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "accountId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE88888"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
  "readOnly": true,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": false,
  "recipientAccountId": "123456789012",
  "eventCategory": "Data",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

권한 부여 관리(ManageAuthorization)

다음 CloudTrail 예제는 ManageAuthorization 작업에 대한 데이터 이벤트 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:30:40Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "ManageAuthorization",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "authorizationId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE99999"
  },
  "responseElements": {
    "location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/authz/a1b2c3d4-5678-90ab-cdef-EXAMPLE99999",
    "status": "valid",
    "expires": "2026-06-17T20:30:40Z",
    "identifier": {
      "type": "dns",
      "value": "example.example.com"
    },
    "challenges": []
  },
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": false,
  "recipientAccountId": "123456789012",
  "eventCategory": "Data",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

nonce 요청(NewNonce)

다음 CloudTrail 예제는 NewNonce 작업에 대한 데이터 이벤트 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:30:39Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "NewNonce",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": false,
  "recipientAccountId": "123456789012",
  "eventCategory": "Data",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

주문 생성(NewOrder)

다음 CloudTrail 예제는 NewOrder 작업에 대한 데이터 이벤트 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "Unknown",
    "principalId": "anonymous",
    "arn": "anonymous",
    "accountId": "123456789012",
    "userName": "anonymous"
  },
  "eventTime": "2026-06-10T20:29:26Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "NewOrder",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "192.0.2.0",
  "userAgent": "aws-cli/2.0",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "identifiers": [
      {
        "type": "dns",
        "value": "example.example.com"
      }
    ]
  },
  "responseElements": {
    "status": "ready",
    "expires": "2026-06-17T20:29:26Z",
    "identifiers": [
      {
        "type": "dns",
        "value": "example.example.com"
      }
    ],
    "authorizations": [
      "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/authz/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333"
    ],
    "finalize": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/order/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222/finalize",
    "location": "https://acm-acme-enroll.us-east-1.api.aws/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/order/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
    "statusCode": 201
  },
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": false,
  "recipientAccountId": "123456789012",
  "eventCategory": "Data",
  "tlsDetails": {
    "tlsVersion": "TLSv1.3",
    "cipherSuite": "TLS_AES_128_GCM_SHA256",
    "clientProvidedHostHeader": "acm-acme-enroll.us-east-1.api.aws"
  }
}

인증서 취소(RevokeCertificate)

다음 CloudTrail 예제는 RevokeCertificate 작업에 대한 데이터 이벤트 로그 항목을 보여줍니다.

{
  "eventVersion": "1.11",
  "userIdentity": {
    "type": "AssumedRole",
    "principalId": "AROAEXAMPLEID:example-session",
    "arn": "arn:aws:sts::123456789012:assumed-role/example-role/example-session",
    "accountId": "123456789012",
    "accessKeyId": "ASIAIOSFODNN7EXAMPLE",
    "sessionContext": {
      "sessionIssuer": {
        "type": "Role",
        "principalId": "AROAEXAMPLEID",
        "arn": "arn:aws:iam::123456789012:role/example-role",
        "accountId": "123456789012",
        "userName": "example-role"
      },
      "attributes": {
        "creationDate": "2026-06-10T20:30:37Z",
        "mfaAuthenticated": "false"
      },
      "sourceIdentity": "acm-acme-a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
    },
    "invokedBy": "acm-acme.amazonaws.com"
  },
  "eventTime": "2026-06-10T20:30:37Z",
  "eventSource": "acm-acme.amazonaws.com",
  "eventName": "RevokeCertificate",
  "awsRegion": "us-east-1",
  "sourceIPAddress": "acm-acme.amazonaws.com",
  "userAgent": "acm-acme.amazonaws.com",
  "requestParameters": {
    "serverUuid": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "certificate": "EXAMPLE"
  },
  "responseElements": null,
  "requestID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE44444",
  "eventID": "a1b2c3d4-5678-90ab-cdef-EXAMPLE55555",
  "readOnly": false,
  "resources": [
    {
      "accountId": "123456789012",
      "type": "AWS::CertificateManager::AcmeEndpoint",
      "ARN": "arn:aws:acm:us-east-1:123456789012:acme-endpoint/a1b2c3d4-5678-90ab-cdef-EXAMPLE66666"
    }
  ],
  "eventType": "AwsApiCall",
  "managementEvent": false,
  "recipientAccountId": "123456789012",
  "eventCategory": "Data"
}