AWS Private CA now provides detailed certificate issuance logs
AWS Private CA announces detailed certificate issuance logs, a new AWS CloudTrail service event that records the complete certificate content, issuing CA information, requester identity, and signing status for every issuance.
Amazon Athena•Feature•