AWS adds automatic certificate revocation checks to IAM Roles Anywhere

AWS says IAM Roles Anywhere can now automatically retrieve certificate revocation lists and deny credential requests that use revoked certificates. Previously, customers had to import those lists again whenever their certificate authority updated them. Administrators enable the feature on a trust anchor. The service then reads distribution URLs embedded in certificates, downloads the lists and refreshes them periodically. It supports AWS Private Certificate Authority and customers' own certificate infrastructure, provided certificates contain publicly accessible distribution URLs that meet the requirements. The feature is available at no additional cost in all commercial AWS Regions.