How do I upgrade an RDS Postgres instance with expired CA?

Question

I'm trying to upgrade the engine version on an old RDS Postgres instance. My modification fails, because the old certificate authority (rds-ca-2015) is not found.

Is there a way around it?

![Error Screenshot](/media/postImages/original/IM09LdcevAQM-A6GaxJqJwFA)

Accepted Answer

Hello.

How about trying to change only the RDS certificate using the following command with the AWS CLI?  
Please note that "rds-ca-2019" will expire in 2024.  
https://aws.amazon.com/jp/blogs/aws/rotate-your-ssl-tls-certificates-now-amazon-rds-and-amazon-aurora-expire-in-2024/  
```
aws rds modify-db-instance \
          --db-instance-identifier  \
          --ca-certificate-identifier rds-ca-rsa2048-g1 \
          --apply-immediately
```

How do I upgrade an RDS Postgres instance with expired CA?

相关内容