AWS Certificate Manager Now Lets You Switch from Email to DNS Validation

AWS Certificate Manager now supports switching your existing TLS certificates from email to DNS validation without reissuing them or changing their ARN—perfect timing since email validation gets deprecated in 2027. This means you can keep your CI/CD pipelines and load balancer configs intact while enabling fully automated certificate renewals across all AWS regions.