# AWS Private CA adds logs for successful and failed certificate issuance

_Published Monday, October 5, 2026 at 1:11 PM EDT · Security, Infrastructure · Latest · Tier 2 — Notable_

AWS says Private CA now automatically records detailed certificate issuance events in CloudTrail across all regions where the service is offered. The logs capture certificate content, the issuing certificate authority, requester identity and signing status for successful and failed issuance.

Previously, the issuance API's management event recorded a successful call and certificate identifier but omitted certificate content, signing authority details and failures before signing. The new events include failure explanations and can support auditing, inventory and signing algorithm migration tracking. Cross-account events go to the certificate authority owner's account. No setup is required, and standard CloudTrail pricing still applies.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/10/aws-private-ca-certificate-issuance-logs/)

---
Canonical: https://techandbusiness.org/newswire/dCjAYDYp6jUveM4GVav_D8
Published: 2026-10-05T17:11:59.653Z
Story chronology: 2026-10-05T09:00:00.000Z
Retrieved: 2026-10-05T19:15:50.089Z
Publisher: Tech & Business (techandbusiness.org)