Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

[RDS/Aurora] Use TLS with Route53-provided CNAME

1

We use a Route53-provided CNAME record to point to our database cluster in order to have easily-recognizable urls for our DBs and be able to perform migrations seamlessly (from the point of view of the app that relies on the database).

When using such a CNAME, is it possible to use TLS to connect to the database?

Topics
AnalyticsInternet of Things (IoT)Migration & ModernizationDatabaseNetworking & Content Delivery
Tags
Transport Layer Security (TLS)Amazon Route 53Aurora PostgreSQLAmazon Relational Database Service
Language
English
asked 3 years ago1.8K views
1 Answer
1

If you want TLS to be verified without warnings the name you are connecting to must match the name in the Cert. As such, using a CNAME will not work.

AWS
EXPERT
answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content