SSL/TLS Certificate's renewal period is above 30 days - Complete Cloud Security in Minutes - Orca Security

Neglected assets

SSL/TLS Certificate’s renewal period is above 30 days

Risk Level

Informational (4)

Platform(s)

Compliance Frameworks

AWS Foundational Security Best Practices Controls

Description

An SSL certificate is a digital certificate that authenticates a program's identity and enables an encrypted connection. Certificates provided by ACM are automatically renewed. ACM does not automatically renew the certificates that you import. Ensure that none of the ACM certificates renewal periods are more than 30 days.

Recommended Mitigation

Renew the ACM certificates after a specified period of no more than 30 days. For more information follow the instructions at: https://docs.aws.amazon.com/config/latest/developerguide/acm-certificate-expiration-check.html

See Orca in action

See Orca in action-> View a 10 minute recorded demo or sign up for a personalized one-on-one walk-through.