AWS Certificate Manager now supports ACME issuance through AWS PrivateLink

Published
October 6, 2026
https://aws.amazon.com/about-aws/whats-new/2026/10/AWS-Certificate-Manager-ACME-Privatelink

AWS Certificate Manager (ACM) Updates

ACM now supports AWS PrivateLink for ACME public certificate issuance, enabling you to request and renew public TLS certificates over a private network path within the AWS network.

What to do

  • Create a VPC interface endpoint to the ACM ACME service.
  • Route issuance traffic from any ACMEv2-compatible client through your VPC.
  • No changes required for existing ACME clients.
  • Use the VPC console, AWS CLI, or AWS CloudFormation to create a standard VPC interface endpoint.
  • Monitor activity in the ACM console with AWS CloudTrail logging and Amazon CloudWatch metrics.

AWS PrivateLink support for ACME certificate issuance is available in all commercial AWS Regions. Standard AWS PrivateLink charges apply for interface endpoints.

  • Item: Standard AWS PrivateLink charges apply for interface endpoints.

Source: AWS release notes




If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.

Follow our blog

Get the latest insights and advice on AWS services from our experts.

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.