Automate Certificates With ACME Support in AWS Certificate Manager

AWS Certificate Manager now supports the ACME protocol for automated issuance and renewal of TLS certificates. The launch is timed to a CA/Browser Forum mandate phasing down maximum public certificate validity: 100 days by March 2027, then 47 days by March 2029. Manual rotation becomes impractical at those intervals, making automation close to a requirement for compliance. Teams managing TLS at scale on AWS should evaluate migrating cert issuance workflows to ACME-based automation ahead of the 2027 deadline.