Skip to content

Commit aedf617

Browse files
authored
chore(rds): deprecate CA certificate rds-ca-2019 (#31387)
### Reason for this change The certificate `rds-ca-2019` expired in August, 2024. > Amazon RDS Certificate Authority certificates rds-ca-2019 are set to expire in August, 2024. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html I also confirmed in CLI: ``` ❯ aws rds describe-db-engine-versions --default-only --engine postgres { "DBEngineVersions": [ { ... ... "SupportedCACertificateIdentifiers": [ "rds-ca-ecc384-g1", "rds-ca-rsa4096-g1", "rds-ca-rsa2048-g1" ], } ] } ``` CFn deploy errors: ``` Resource handler returned message: "Certificate not found: rds-ca-2019 (Service: Rds, Status Code: 404, Request ID: ..." ``` ### Description of changes Deprecate the certificate. ### Description of how you validated changes ### Checklist - [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md) ---- *By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
1 parent 4b90bfc commit aedf617

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

packages/aws-cdk-lib/aws-rds/lib/ca-certificate.ts

+1
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@
66
export class CaCertificate {
77
/**
88
* rds-ca-2019 certificate authority
9+
* @deprecated rds-ca-2019 expired in August, 2024.
910
*/
1011
public static readonly RDS_CA_2019 = CaCertificate.of('rds-ca-2019');
1112

0 commit comments

Comments
 (0)