- ACM adds support for ACME public certificate issuance through AWS PrivateLink, allowing private network traffic for requests and renewals.
- Create a VPC interface endpoint to the ACM ACME service; Private DNS automatically maps the existing ACME URL, so client configurations remain unchanged.
- All issuance actions are logged via CloudTrail and CloudWatch, with standard PrivateLink pricing applied.