HIGH
Source
CloudSploit
ID
acm-certificate-expiry

ACM Certificate Expiry

Detect upcoming expiration of ACM certificates

Certificates that have expired will trigger warnings in all major browsers. AWS will attempt to automatically renew the certificate but may be unable to do so if email or DNS validation cannot be confirmed.

Ensure AWS is able to renew the certificate via email or DNS validation of the domain.