AWS Private Certificate Authority now supports partitioned CRLs

This document introduces AWS Private CA’s partitioned CRLs, a feature that scales certificate issuance and revocation capacity from 1M to 100M per CA by distributing revocation data across smaller 1 MB CRL partitions, bound via the Issuer Distribution Point extension for accurate validation. It provides step-by-step guidance to enable partitioned CRLs, outlines required S3 bucket policy considerations, and emphasizes operational efficiency, broad application compatibility, and compliance with standards like RFC5280, WebTrust, and ETSI. The feature enhances PKI scalability and incident response without additional cost beyond AWS Private CA and Amazon S3.