diff --git a/.changelog/46498.txt b/.changelog/46498.txt
new file mode 100644
index 000000000000..6fb81d7a6915
--- /dev/null
+++ b/.changelog/46498.txt
@@ -0,0 +1,2 @@
+release-note:bug
+resource/aws_acm_certificate: Fix options.export defaulting to ENABLED instead of DISABLED when options block is not specified
diff --git a/internal/service/acm/certificate.go b/internal/service/acm/certificate.go
index ee2af1cd58eb..4ba72877bb4a 100644
--- a/internal/service/acm/certificate.go
+++ b/internal/service/acm/certificate.go
@@ -634,6 +634,8 @@ func expandCertificateOptions(tfMap map[string]any) *types.CertificateOptions {
 
 	if v, ok := tfMap["export"].(string); ok && v != "" {
 		apiObject.Export = types.CertificateExport(v)
+	} else {
+		apiObject.Export = types.CertificateExportDisabled
 	}
 
 	return apiObject