🟡 Medium | Source: AWS Security Blog
AWS Certificate Manager (ACM) is introducing support for the ACME protocol, enabling automated TLS certificate issuance and renewal. This is increasingly important because the CA/Browser Forum is mandating shorter certificate lifespans — down to 100 days by March 2027 and 47 days by March 2029 — making manual renewal processes unmanageable at scale. Organisations that don’t automate now risk widespread certificate expiry incidents as validity windows shrink.
Security Architect’s Take: Begin evaluating ACME integration with ACM now, particularly for workloads with large certificate inventories; map existing manual or semi-automated renewal workflows and prioritise migrating them before the March 2027 validity reduction takes effect to avoid operational risk.
Original advisory: Automate certificates with ACME support in AWS Certificate Manager