AWS IAM Roles Anywhere Gets Smarter Certificate Revocation Checks
AWS IAM Roles Anywhere now automatically validates certificate revocation status by reading CRL distribution points directly from your certificates—no more manual CRL imports needed. This works with AWS Private Certificate Authority or your own PKI setup, available at no extra cost across all commercial AWS regions.
source: [aws/whats-new]