AWS_ACM_5 - Cloudlytics

AWS_ACM_5

Ensure the AWS Certificate Manager (ACM) has no unused certificates

Description

Checks the ACM for unused certificates. It is recommended to delete unused certificates, or associate them (use them).

Remediation

To delete unused certificates:

Sign into the AWS console
In the console, select the region
Navigate to the Certificate Manager(ACM) service
Select the certificate that was reported
Under Actions” drop-down click “Delete” Alternatively, you can associate/use the unused certificate to the resource which requires the certificate.

“

Service

ACM

Severity

Medium

Compliance

Mapping