Medium ACM Regional

Imported and ACM-issued certificates should be renewed after a specified time period

NISTISO 27001

Description

Flags ACM certificates — both imported and AWS-managed — that are within 30 days of expiration and require renewal.


Remediation

To renew ACM certificates, follow the guidelines provided by AWS Certificate Manager for domains validated by email or DNS.

Steps

  1. Check the expiration date of your certificates.
  2. For domains validated by email, respond to the email notifications to renew the certificates.
  3. For domains validated by DNS, ensure that DNS validation records are in place for automatic renewal.

Compliance

NISTISO 27001