AWS Private CA gains customer-managed permissions for cross-account sharing
Action Required
Organizations can now precisely control access to their AWS Private CA across multiple accounts, improving security posture and simplifying PKI management.
AI Impact Summary
AWS Private CA now supports customer-managed permissions for cross-account sharing via AWS RAM, offering greater control over access to certificate authorities. This allows organizations to tailor permissions to specific accounts or organizational units, moving beyond the previous restriction to predefined AWS-managed permissions. This enhanced flexibility improves security and simplifies PKI management across multiple AWS accounts.
Affected Systems
- Date
- Date not specified
- Change type
- capability
- Severity
- high