Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

AWS Certificate Manager supports switching from e-mail to DNS validation

Дата публикации: 13-08-2026 15:00:00

AWS Certificate Manager (ACM) now enables you to change the domain validation method on your existing ACM issued public TLS certificates from e-mail to DNS, without reissuing the certificate or changing its existing Amazon Resource Name (ARN). Due to the Certification Authority/Browser (CA/B) Forum's mandated deprecation of email-based domain validation for publicly trusted certificates, effective March 15, 2028, ACM will phase out its support for email validation throughout 2027. ACM will no longer issue email-validated certificates starting March 31 2027, and stop renewing email-validated certificates on September 30 2027. More details on ACM's deprecation of email validation can be found on the AWS Security Blog. By switching to DNS validation now, you can transition ahead of that deadline and enable fully automated renewals through DNS validated certificates.
Your certificate ARN remains unchanged after switching from e-mail to DNS validation, so existing ARN references in your CI/CD pipelines, load balancer configurations, and other AWS service integrations continue to work without modification. To switch the validation method, use the ACM console or the  UpdateCertificateOptions API. ACM provides a CNAME record for each domain in the certificate (the same mechanism used when provisioning new certificates with DNS validation) and you have up to 72 hours to add the records to your DNS configuration. You can monitor the validation status of each domain via the console or the ListCertificateDomainValidations API. We recommend DNS validation for new certificates, and HTTP validation for Amazon CloudFront distributions..
This feature is available in all AWS Regions where ACM certificates are available. To get started, refer to  Migrating from email to DNS validation in the AWS Certificate Manager User Guide.

Основное содержимое страницы с новостью.

AWS Certificate Manager (ACM) now enables you to change the domain validation method on your existing ACM issued public TLS certificates from e-mail to DNS, without reissuing the certificate or changing its existing Amazon Resource Name (ARN). Due to the Certification Authority/Browser (CA/B) Forum's mandated deprecation of email-based domain validation for publicly trusted certificates, effective March 15, 2028, ACM will phase out its support for email validation throughout 2027. ACM will no longer issue email-validated certificates starting March 31 2027, and stop renewing email-validated certificates on September 30 2027. More details on ACM's deprecation of email validation can be found on the AWS Security Blog. By switching to DNS validation now, you can transition ahead of that deadline and enable fully automated renewals through DNS validated certificates.

Your certificate ARN remains unchanged after switching from e-mail to DNS validation, so existing ARN references in your CI/CD pipelines, load balancer configurations, and other AWS service integrations continue to work without modification. To switch the validation method, use the ACM console or the  UpdateCertificateOptions API. ACM provides a CNAME record for each domain in the certificate (the same mechanism used when provisioning new certificates with DNS validation) and you have up to 72 hours to add the records to your DNS configuration. You can monitor the validation status of each domain via the console or the ListCertificateDomainValidations API. We recommend DNS validation for new certificates, and HTTP validation for Amazon CloudFront distributions..

This feature is available in all AWS Regions where ACM certificates are available. To get started, refer to  Migrating from email to DNS validation in the AWS Certificate Manager User Guide.

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1Amazon MSK now supports configuring custom domain names for MSK Provisioned clusters05.317-08-2026
2DNS is infrastructure. It’s time to manage it that way.020.0730-07-2026
3AWS Secrets Manager adds managed external secrets support for Jenkins and SonarQube0711-08-2026
4Amazon SES click tracking now supports custom URL paths for mobile app deep linking05.614-08-2026
5SSL/TLS Certificate Management Maintenance06.6224-08-2026
6AWS IAM identity federation to external services is now available in AWS European Sovereign Cloud Region06.6618-08-2026
7Strengthening Cloud Perimeters Through DNS Filtering and Site Controls in 2026011.2421-07-2026
8AWS Client VPN now supports CLI, administration controls, and faster connections07.5213-08-2026
9AWS Network Firewall Now Supports Stateful Rule Hit Counts 021.217-08-2026
10AWS Billing and Cost Management introduces Managed Dashboards08.4414-08-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 13.56. Источник: aws.amazon.com.