AWS Private CA now provides detailed certificate issuance logs
News
AWS Private CA announces detailed certificate issuance logs, a new CloudTrail service event capturing complete certificate content, CA information, requester identity, and signing status for every issuance.
- IssueCertificateDetails event captures complete to-be-signed certificate with all X.509 fields and extensions
- Records both successful and failed issuance attempts, including pre-signing failures with explanations
- Identifies requester: account, IAM principal, or service principal for integrated AWS services
- Automatically delivered as CloudTrail management event with no configuration or additional cost
- Enables real-time actions via EventBridge or batch queries with Athena for auditing and monitoring
- Available in all AWS Regions where AWS Private CA is offered
This feature enhances compliance auditing, certificate inventory management, algorithm migration tracking, and failed-issuance monitoring without requiring additional configuration.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
2025
2026
2025
2025
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.