How Can I Avoid Connection Issues While Updating My RDS Certificate Authority (CA)?

Question

How can I avoid connection issues while updating my RDS Certificate Authority (CA)?

Environment

The following connectors:

• Amazon Aurora MySQL
• Amazon RDS for MySQL

Answer

To avoid connection issues while updating your RDS CA, do the following:

1. Pause your connector.

   i. In Fivetran, go to your connector page.

   ii. In the top right, set the ENABLED toggle to OFF.

2. Update your database's CA certificate to one of the following supported cdrtificates:

   • rds-ca-2019
   • rds-ca-rsa2048-g1
   • rds-ca-rsa4096-g1

   NOTE: We don't support the rds-ca-ecc384-g1 certificate.

3. Restart your RDS instance to apply the new CA certificate.

4. Resume your connector and test the connection.

   i. In Fivetran, go to your connector page.

   ii. Set the ENABLED toggle to ON.

   iii. Select the Setup tab.

   iv. Click Edit connection.

   v. Click Save & Test.

   vi. If prompted, confirm the new certificate.

NOTE: We automatically trust some CA certificates. Therefore, when you test your connection, we may not prompt you to confirm the new certificate.