AWS Private CA Gets Detailed Certificate Logging for Better Compliance
AWS Private CA now emits detailed IssueCertificateDetails events through CloudTrail, capturing complete certificate content, issuer info, requester identity, and signing status for every issuance—both successful and failed. This means you can finally audit certificate inventory, track algorithm migrations, and catch pre-signing failures like name constraint violations, all without extra configuration or cost.
source: [aws/whats-new]