AWS Certificate Manager will discontinue email validation to prove domain validation for certificates
2026-08-14T08:52:00Z•1c037a8ac550aa15843cfe99c05a4cbf9e1df59ec73ba53014f9b59ee0f63669
ACMAI-securityAWSC5:2020DNS-validationDPRKHIPAAIAMKMSNorth-KoreaPCI-DSSPyPIS3SBOMSOC-1TLS-certificatescertificate-managementcloud-securitycomplianceencryptionidentity-and-access-managementmisconfigurationnpmsoftware-supply-chainvulnerability-management
What happened
AWS Security Blog RSS feed containing announcements, compliance reports, identity and access management guidance, S3 permission remediation, certificate lifecycle changes, encryption architecture, AI coding-agent controls, software supply-chain security, and vulnerability-management tooling. The most security-relevant items address the planned discontinuation of email validation for ACM public certificates by September 30, 2027, over-permissioned S3 buckets, DPRK-linked open-source supply-chain attacks, and securing npm/PyPI package updates.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- aws_security_blog
- Record identifier
- 1c037a8ac550aa15843cfe99c05a4cbf9e1df59ec73ba53014f9b59ee0f63669
- Enrichment time
- 2026-08-14T08:52:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.