AccountConfiguration

Source: src/AWS/ACM/AccountConfiguration.ts

Account-level ACM configuration (AWS::CertificateManager::Account).

ACM emits one ACM Certificate Approaching Expiration EventBridge event per day per certificate starting daysBeforeExpiry days before each certificate expires. This account-global singleton manages that threshold via acm:PutAccountConfiguration. Deleting the resource resets the threshold to the AWS default of 45 days.

Like the Certificate resource, the provider pins its API calls to us-east-1.

Configuring Expiry Events

Start Expiry Events 30 Days Before Expiration

const config = yield* AccountConfiguration("AcmAccount", {
  daysBeforeExpiry: "30 days",
});

Consume the Expiry Events

// The events arrive on the default EventBridge bus with source "aws.acm".
yield* AWS.ACM.consumeExpiryEvents({}, (events) =>
  Stream.runForEach(events, (event) =>
    Effect.log(
      `${event.detail.CommonName} expires in ${event.detail.DaysToExpiry} days`,
    ),
  ),
);