Whether you're taking your first steps with Kubernetes or you're an experienced practitioner looking to sharpen your skills, our Amazon EKS workshop series delivers practical, real-world experience that moves you forward. Learn directly from AWS solutions architects and EKS specialists through hands-on sessions designed to build your confidence with Kubernetes. Register now and start building with Amazon EKS!
How do I update my SSL/TLS certificate for an Amazon RDS DB instance or Aurora DB cluster?
I want to update the SSL/TLS certificate that my Amazon Relational Database Service (Amazon RDS) DB instance or Amazon Aurora DB cluster uses.
Resolution
If your applications use SSL/TLS to connect to Amazon RDS databases and your SSL/TLS certificate is about to expire, then rotate your SSL/TLS certificate.
To rotate your SSL/TLS certificate, update your client application or service to include the new Certificate Authority (CA) certificates in its trust store. Use the combined bundle that contains both the new and the old CA certificates. Then, update your RDS DB instances to use the new CA certificates. Before you deploy the new SSL/TLS certificate to your production environment, make sure that you test the client and server.
For more information, see the following documentation:
- Rotating your SSL/TLS certificate (Amazon RDS)
- Rotating your SSL/TLS certificate (Aurora)
Related information
Using SSL/TLS to encrypt a connection to a DB instance or cluster
- Language
- English
What is the standard approach for,
- downloading a new certificate when there is any update in RDS certificates?
- how does application know about server certificate change?
This should all be done programmatically without affecting incoming traffic.
Thank you for your comment. We'll review and update the Knowledge Center article as needed.
I've never used SSL for my RDS tho. if i need to use a SSL, how do i do this?
Thank you for your comment. We'll review and update the Knowledge Center article as needed.
Relevant content
- asked 2 years ago
- AWS OFFICIALUpdated 10 months ago
