# AWS adds automatic certificate revocation checks to IAM Roles Anywhere

_Published Thursday, November 5, 2026 at 1:14 PM EST · Security · Latest · Tier 2 — Notable_

AWS says IAM Roles Anywhere can now automatically retrieve certificate revocation lists and deny credential requests that use revoked certificates. Previously, customers had to import those lists again whenever their certificate authority updated them.

Administrators enable the feature on a trust anchor. The service then reads distribution URLs embedded in certificates, downloads the lists and refreshes them periodically. It supports AWS Private Certificate Authority and customers' own certificate infrastructure, provided certificates contain publicly accessible distribution URLs that meet the requirements. The feature is available at no additional cost in all commercial AWS Regions.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/11/iam-roles-anywhere-cdp/)

---
Canonical: https://techandbusiness.org/newswire/YRrmIN5irB98F1hO4BQgHd
Published: 2026-11-05T18:14:47.692Z
Story chronology: 2026-11-05T17:38:00.000Z
Retrieved: 2026-11-06T22:48:32.672Z
Publisher: Tech & Business (techandbusiness.org)