- ACM now provides a managed ACME server endpoint for automated issuance of public TLS certificates (45‑day validity) via any ACMEv2 client.
- Admins can define domain scopes, enforce wildcard policies, and delegate requests, with all activity logged to CloudTrail and CloudWatch.
- Feature is available in all commercial AWS Regions; see ACM pricing page for cost details.