- IAM Roles Anywhere now automatically checks certificate revocation using CRL distribution points.
- It downloads and refreshes CRLs from embedded CDP URLs, removing the need for manual re‑imports.
- Supported with AWS Private CA or external PKI and incurs no additional cost.