Using CloudTrail - AWS Private Certificate Authority