How do I upgrade an RDS Postgres instance with expired CA?
0
I'm trying to upgrade the engine version on an old RDS Postgres instance. My modification fails, because the old certificate authority (rds-ca-2015) is not found.
Is there a way around it?
1 Answer
- Newest
- Most votes
- Most comments
2
Hello.
How about trying to change only the RDS certificate using the following command with the AWS CLI?
Please note that "rds-ca-2019" will expire in 2024.
https://aws.amazon.com/jp/blogs/aws/rotate-your-ssl-tls-certificates-now-amazon-rds-and-amazon-aurora-expire-in-2024/
aws rds modify-db-instance \
--db-instance-identifier <yourdbinstance> \
--ca-certificate-identifier rds-ca-rsa2048-g1 \
--apply-immediately
Relevant content
- asked 2 years ago
- Accepted Answerasked 5 years ago
AWS OFFICIALUpdated 8 months ago- AWS OFFICIALUpdated 2 months ago
- AWS OFFICIALUpdated 3 months ago
Updating only the CA has helped. Thank you!