HIGH

Ensure imported certificates are renewed before expiration

Imported certificates do not auto-renew and must be manually replaced.

Security Impact

Expired imported certificates cause service outages.

How to Remediate

Set reminders for imported certificate expiration. Consider migrating to ACM-issued certificates.

Affected Resources

AWS::CertificateManager::Certificate

Compliance Frameworks

SOC 2PCI-DSS

How TigerGate Helps

TigerGate continuously monitors your AWS environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all AWS Certificate Manager (ACM) resources across your AWS accounts every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for SOC 2, PCI-DSS compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
aws-acm-8
Service
AWS Certificate Manager (ACM)
Category
Certificate Management
Severity
HIGH

Automate This Check

TigerGate automatically scans your AWS environment for this and 575+ other security checks.

Start Free Trial

Related AWS Certificate Manager (ACM) Checks

View all checks
aws-acm-1high

Ensure ACM certificates are not expiring soon

aws-acm-2medium

Ensure ACM certificates use RSA-2048 or higher

aws-acm-3medium

Ensure ACM certificates have Certificate Transparency logging enabled

aws-acm-4low

Ensure ACM certificates are in use

aws-acm-5medium

Ensure ACM certificate validation is completed