From 55ed7f7110b58b46bdfc080308e9e7d0d0e5902c Mon Sep 17 00:00:00 2001 From: Arnaud Venturi Date: Thu, 24 Aug 2023 18:31:22 +0200 Subject: [PATCH] aws/rds: Switch AWS RDS CA bundle to the officially documented URL (#3307) --- aws/rds/rds.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/aws/rds/rds.go b/aws/rds/rds.go index 5582d3a92f..01054b72cf 100644 --- a/aws/rds/rds.go +++ b/aws/rds/rds.go @@ -41,7 +41,7 @@ type CertPoolProvider interface { } // caBundleURL is the URL to the public RDS Certificate Authority keys. -const caBundleURL = "https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem" +const caBundleURL = "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem" // CertFetcher pulls the RDS CA certificates from Amazon's servers. The zero // value will fetch certificates using the default HTTP client.