(aws-certificatemanager): Support CertificateExport for acm.Certificate

[frankhefeng]

Describe the feature

AWS release a new feature in ACM to support exportable public certificates to use anywhere: https://aws.amazon.com/blogs/aws/aws-certificate-manager-introduces-exportable-public-ssl-tls-certificates-to-use-anywhere/

Use Case

We want to use ACM exportable public certificates to replace all those certificates purchased from another vendor

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

AWS CDK Library version (aws-cdk-lib)

any version

AWS CDK CLI version

any version

Environment details (OS name and version, etc.)

n/a

[pahud]

Hi @frankhefeng,

Thank you for this feature request! You're absolutely right that AWS Certificate Manager now supports exportable public certificates, and the CDK should provide support for this new capability.

I can confirm this is a legitimate feature gap. The AWS CloudFormation AWS::CertificateManager::Certificate resource supports the CertificateExport property, but our Certificate construct hasn't been updated to expose this functionality yet.

The implementation would be straightforward and follow the existing pattern used for transparencyLoggingEnabled. We'd need to:

1. Add a certificateExportEnabled?: boolean property to the CertificateProps interface
2. Map this to the CloudFormation CertificateExport property ('ENABLED'/'DISABLED')
3. Add appropriate tests and documentation

I see you've already submitted PR #35079 to implement this feature - that's fantastic! The community contribution approach is exactly what we encourage. The implementation looks like it follows the right patterns, and this would be a valuable addition to help users leverage ACM's new exportable certificate capabilities.

Would you like to continue with your PR implementation? If you need any guidance on the contribution process or have questions about the implementation approach, please let us know.

Thanks for helping improve the CDK! 🚀

[frankhefeng]

hey @pahud, would you help on the PR review?
We really need this feature as we have a few dozens of SSL certificates to be renewed and we want to use ACM this time.
Thank you very much.

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.