Description

Detects expired SSL/TLS certificates in AWS Certificate Manager (ACM). Expired certificates pose security risks by potentially disrupting HTTPS connections and triggering browser security warnings, which can impact service availability and user trust.

Detection Strategy

• Scans all SSL/TLS certificates managed in AWS Certificate Manager

• Reports a vulnerability when any certificate is found with a status of 'EXPIRED'

• Includes the certificate's ARN and expired status in the vulnerability report