Skip to content

runbooks cert dns-checkΒΆ

find | Security/Identity

βœ… CERTIFIED Β· T:βœ”οΈ V:βž– A:βž– X:βž–

Check ACM DNS validation CNAME records via dig.

Discovers and monitors ACM/IAM certificates across AWS accounts and Azure Key Vault

Single account

runbooks cert dns-check --profile <account>

Org-wide (Landing Zone)

# [A1-Discovery] org-wide via Landing Zone hub profile
runbooks cert dns-check --all-profile $AWS_OPERATIONS_PROFILE

Show a Security/Identity discovers and monitors acm/iam certificates across aws accounts and azure key vault summary for last month across all accounts and flag any anomalies above the 20% threshold.

ExamplesΒΆ