DACP: update the rds cert to rds-ca-rsa2048-g1 (#7031)

ministryofjustice · Jul 9, 2024 · 5bdd77e · 5bdd77e
1 parent b35fcac
commit 5bdd77e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/terraform/environments/dacp/rds.tf b/terraform/environments/dacp/rds.tf
@@ -14,6 +14,8 @@ resource "aws_db_instance" "dacp_db" {
   vpc_security_group_ids      = [aws_security_group.postgresql_db_sc[0].id]
   db_subnet_group_name        = aws_db_subnet_group.dbsubnetgroup.name
   allow_major_version_upgrade = true
+  ca_cert_identifier          = "rds-ca-rsa2048-g1"
+  apply_immediately           = true
 }
 
 resource "aws_db_subnet_group" "dbsubnetgroup" {