微微导航

AWS RDS SSL CA Certificate Update








CMS Cloud


AWS RDS SSL CA Certificate Update

________________________________________________________________________



Summary

The Amazon Web Services (AWS) current Relational Database Service (RDS) Certificate Authority (CA) will expire on *August 22, 2024*. Customers are required to install the latest RDS CA in their application stack and then update their RDS instance by *August 22, 2024*, to avoid a loss of connectivity to the RDS database.

Action Required

Customers are required to follow the steps provided by AWS [ https://aws.amazon.com/blogs/aws/rotate-your-ssl-tls-certificates-now-amazon-rds-and-amazon-aurora-expire-in-2024/ ] to conduct this update by *August 22, 2024*, to avoid losing connectivity to the RDS database. For clients using a trust store, customers should add the new CA certificates into the trust stores of client applications before scheduling the CA certificate rotation on your database to ensure that all client applications using Secure Socket Layer/Transport Layer Security (SSL/TLS) and the server certificate are updated. For additional support and assistance, please coordinate with your IUSG Advisor or assigned Solutions Engineer.

Background 

The AWS RDS leverages SSL to encrypt communication with the database. These SSL certificates are signed by an internal AWS Certificate Authority (CA).

Questions

For questions or issues about this change, please get in touch with your IUSG Advisor.



Office of Information Technology




You are subscribed to receive email messages about CMS Cloud Operations, Changes, and Outages from the Centers for Medicare & Medicaid Services (CMS).

To update your subscription(s), preferences or to stop receiving messages from the CMS Cloud Operations, Changes, and Outages Updates- distribution list, please go to our Subscriber Preferences Page [ https://public.govdelivery.com/accounts/USCMS/subscriber/new?category_id=USCMS_C176 ].

________________________________________________________________________

This email was sent to mshinji3056@gmail.com using GovDelivery Communications Cloud 7500 Security Boulevard · Baltimore MD 21244


body .abe-column-block {min-height: 5px;}