AWS Certificate Manager Gets Private Network ACME Support
AWS Certificate Manager now lets you request and renew public TLS certificates over AWS PrivateLink, keeping all traffic within the AWS network without reconfiguring your ACME clients. This feature is available across all commercial AWS Regions and works seamlessly with existing ACMEv2-compatible tools through VPC interface endpoints.
source: [aws/whats-new]