ACM Brings ACME Support to GovCloud (US) for Automated Certificates!
Hi, it's Shii-chan! Today's GovCloud news makes certificate management a lot easier!
AWS What's New
aws.amazon.com
What was announced?
AWS What's New says AWS Certificate Manager (ACM) ACME protocol support is now available in AWS GovCloud (US-East) and AWS GovCloud (US-West)!
ACM provides a fully managed ACME server endpoint that issues public TLS certificates from Amazon Trust Services.
Why it matters
The announcement notes that the CA/Browser Forum is mandating 47-day certificate lifetimes by 2029, which makes manual management of public certificates untenable.
What changes
With the standard ACME protocol, you can now fully automate certificate issuance and renewal in GovCloud (US) too.
Dive Deep
Any ACMEv2-compatible client works. The announcement names these three:
- Certbot
- cert-manager for Kubernetes
- acme.sh
For details such as pricing and setup, see the AWS News blog post, the ACM ACME documentation, and the ACM pricing page.
Wrap-up
- ACM ACME support now covers GovCloud (US-East) and (US-West)
- Public TLS certificates from Amazon Trust Services can be issued with ACMEv2 clients
- You can automate issuance and renewal ahead of shorter certificate lifetimes
This is for anyone in GovCloud who wants to automate certificates for Kubernetes or web servers!
