AWS Private CA now provides detailed certificate issuance logs

Published
October 5, 2026
https://aws.amazon.com/about-aws/whats-new/2026/10/aws-private-ca-certificate-issuance-logs/

AWS Private CA Certificate Issuance Logs

AWS Private CA now provides detailed certificate issuance logs, a new AWS CloudTrail service event that records the complete certificate content, issuing CA information, requester identity, and signing status for every issuance. This feature is available in all AWS Regions where AWS Private CA is offered.

What to do

  • Use these events for compliance auditing, certificate inventory, algorithm migration tracking, and failed-issuance monitoring.
  • Events are emitted for both successful and failed issuances.
  • No additional cost beyond standard AWS CloudTrail pricing.
  • Act on events in real time with Amazon EventBridge or query them in batch with Amazon Athena.

Source: AWS release notes




If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.

Follow our blog

Get the latest insights and advice on AWS services from our experts.

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.