By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

[RDS/Aurora] Use TLS with Route53-provided CNAME

1

We use a Route53-provided CNAME record to point to our database cluster in order to have easily-recognizable urls for our DBs and be able to perform migrations seamlessly (from the point of view of the app that relies on the database).

When using such a CNAME, is it possible to use TLS to connect to the database?

Topics
Migration & ModernizationAnalyticsDatabaseNetworking & Content DeliveryInternet of Things (IoT)
Tags
Amazon Relational Database ServiceAurora PostgreSQLAmazon Route 53Transport Layer Security (TLS)
Language
English
Paul S
asked a year ago919 views
1 Answer
1

If you want TLS to be verified without warnings the name you are connecting to must match the name in the Cert. As such, using a CNAME will not work.

profile pictureAWS
EXPERT
iBehr
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content