Announcing new features for AWS IoT Device Defender to improve IoT certificate lifecycle management

Today, AWS IoT Device Defender introduced two features to simplify IoT certificate lifecycle management - a new audit check for certificate age and enhancements to the existing device certificate expiring audit check. The new audit check for certificate age allows developers to monitor and receive alerts based on a certificate's age, regardless of its expiration date. Additionally, the device certificate expiring audit check now supports new configuration options, allowing developers to set custom alert durations before certificate expiration.

Regularly rotating certificates is a critical security practice that mitigates risks from compromised credentials and prevents unexpected connectivity disruptions due to expired certificates in IoT devices used in various solutions, including automotive, smart home, and industrial segments. The new features facilitate scheduled certificate rotation and proactive credential management, making it easier for developers to adhere to industry regulations and security standards while maintaining greater control over the lifecycle of their IoT credentials.

These features are available to AWS IoT Device Defender customers in all regions where the service is offered. For more information, please refer to the AWS IoT Device Defender documentation.