[중요] ap-southeast-2 리전에서 ACM 인증서가 API/CLI로 조회되지 않는 문제 [Urgent] ACM Certificates in ap-southeast-2 Not Visible via API/CLI

Question

안녕하세요.

현재 ap-southeast-2(시드니) 리전에서 심각한 문제를 겪고 있습니다.
AWS Management Console에서는 ACM 인증서가 정상적으로 조회되지만, AWS CLI나 API를 통해서는 해당 인증서 목록이 조회되지 않습니다.

해당 인증서들은 Easy-RSA를 이용해 로컬에서 직접 생성한 뒤, ACM으로 성공적으로 '가져오기(Import)'했습니다.

'AdministratorAccess' 전체 권한을 가진 새로운 IAM 사용자로 CloudShell에서 아래 명령어를 실행해도 결과는 빈 목록으로 나옵니다.
`aws acm list-certificates --region ap-southeast-2`

이 문제 때문에 Client VPN 엔드포인트를 생성할 때 인증서를 선택할 수 없는 등 다른 서비스 이용에 큰 차질이 있습니다.

제 계정의 상태나 해당 리전의 ACM 서비스에 문제가 있는지 확인 부탁드립니다.

감사합니다.

---------------------------------------------------------------------------------

Hi Team,

I am experiencing a critical issue in the ap-southeast-2 (Sydney) region.
My ACM certificates are clearly visible in the AWS Management Console, but they do not appear when I list them using the AWS CLI or API.

These certificates were generated locally using Easy-RSA and then successfully imported into ACM.

The command `aws acm list-certificates --region ap-southeast-2` returns an empty list, even when run from CloudShell with a new IAM user that has the `AdministratorAccess` policy attached.

This issue is preventing me from selecting a certificate when creating a Client VPN Endpoint and blocking other critical tasks.

Could you please investigate if there is an issue with my account's state or the ACM service in this region?

Thank you.

re:Post Agent · Answer

Based on the information provided, I don't see any known regional issues with ACM in ap-southeast-2 that would cause certificates to be visible in the console but not via API/CLI.

To troubleshoot this issue, I recommend checking the following:

1. Verify that you're using the same AWS account and region in both the console and CLI. Ensure your CLI is properly configured for the ap-southeast-2 region.

2. Try using the describe-certificate command with a specific certificate ARN that you can see in the console. The ARN format should be:
`arn:aws:acm:ap-southeast-2:123456789012:certificate/12345678-1234-1234-1234-123456789012`

3. Check if you're using any filters in your list-certificates command that might be excluding your certificates. Try adding query parameters to specifically look for imported certificates:
`aws acm list-certificates --region ap-southeast-2 --query 'CertificateSummaryList[?Type==`IMPORTED`].CertificateArn'`

4. Verify IAM permissions. Even though you're using AdministratorAccess, confirm there are no SCPs (Service Control Policies) or resource-based policies restricting access.

5. Check if there's any difference in behavior when accessing from different network environments or using different AWS access keys.

If the issue persists after these checks, I recommend contacting AWS Support directly as this appears to be an account-specific issue that requires investigation of your specific account configuration.  
**Sources**  
[Options for AWS customers who use Entrust-issued certificates | AWS Security Blog](https://aws.amazon.com/blogs/security/options-for-aws-customers-who-use-entrust-issued-certificates/)  
[request-certificate — AWS CLI 2.27.41 Command Reference](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/acm/request-certificate.html)

[중요] ap-southeast-2 리전에서 ACM 인증서가 API/CLI로 조회되지 않는 문제 [Urgent] ACM Certificates in ap-southeast-2 Not Visible via API/CLI

Add your answer

Relevant content