Amazon AWS

Connects the CLM to AWS for discovery and management of certificates in AWS Certificate Manager (ACM) and automatic DNS validation via Route 53.

---

Uses of this integration

Feature	Supported
Discovery of certificates in ACM	✅
Automatic DNS validation (Let's Encrypt / DigiCert) via Route 53	✅
Certificate issuance	❌
Deploy to Stores	❌

---

Prerequisites

An IAM User or IAM Role with the following minimum permissions:

For ACM (Discovery):

{
  "Effect": "Allow",
  "Action": [
    "acm:ListCertificates",
    "acm:DescribeCertificate",
    "acm:GetCertificate"
  ],
  "Resource": "*"
}

For Route 53 (Automatic DNS validation):

{
  "Effect": "Allow",
  "Action": [
    "route53:ListHostedZones",
    "route53:ChangeResourceRecordSets",
    "route53:GetChange"
  ],
  "Resource": "*"
}

---

Register

1. Go to Integrations in the sidebar menu
2. Find the Amazon AWS card and click + Configure
3. Fill in the credential fields (Access Key ID, Secret Access Key, and default region)
4. Click Test connection to validate
5. Click Save changes

---

Edit and Delete

Click the ⋮ menu on the integration card to edit or delete. Remove the linked discovery jobs before deleting.