AWS – AWS Certificate Manager Private Certificate Authority now supports storing CRLs in private S3 buckets
AWS Certificate Manager (ACM) Private Certificate Authority (CA) now supports using S3 Block Public Access when storing certificate revocation links (CRL) in S3 buckets.
Read More for the details.