--------- Forwarded message ---------
From: ‘Amazon Web Services, Inc.’ via AWS tvlk-eci <aws-tvlk-eci@traveloka.com>
Date: Wed, Oct 16, 2019 at 11:14 AM
Subject: Update Your Amazon RDS SSL/TLS Certificates by October 31, 2019 [AWS Account: 307648842078]
To: <aws-tvlk-eci+prod@traveloka.com>
Cc: <aws-operations+307648842078@traveloka.com>, <aws-security+307648842078@traveloka.com>, <kappatry@amazon.com>, <chenfui@amazon.com>
Hello,
Please act before October 31, 2019 to address an upcoming interruption of your applications using RDS and Aurora database instances.
To protect your communications with RDS database instances, a Certificate Authority (CA) generates time-bound certificates that are checked by your database client software to authenticate any RDS database instance(s) before exchanging information. Following industry best practices, AWS renews the CA and creates new certificates on a routine basis to ensure RDS customer connections are properly protected for years to come. The current CA expires on March 5, 2020, requiring updates to existing RDS database instances with certificates referencing the current CA.
You are receiving this message because you have an Amazon RDS database instance(s) in the AP-NORTHEAST-1, AP-NORTHEAST-2, AP-SOUTHEAST-1, AP-SOUTHEAST-2 Region(s). If your applications connect to those instances using the Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocol please follow the detailed instructions in the link below to complete your update(s). If not completed, your applications will fail to connect to your DB instances using SSL/TLS after March 5, 2020.
We encourage you to test these steps within a development or staging environment before implementing them in your production environments. Beginning today, you can start testing and updating your existing RDS database instances. For detailed instructions, please visit: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html
Any new RDS instances created after November 1, 2019 will default to using the new certificates. If you wish to temporarily modify new instances manually to use the old (rds-ca-2015) certificates, you can do so using the AWS console or the AWS CLI. Any instances created prior to November 1, 2019 will have the rds-ca-2015 certificates until you update them to the rds-ca-2019 version.
If you have questions or issues, please contact AWS Support at: https://aws.amazon.com/support
Sincerely,
Amazon Web Services
Amazon Web Services, Inc. is a subsidiary of Amazon.com, Inc. Amazon.com is a registered trademark of Amazon.com, Inc. This message was produced and distributed by Amazon Web Services Inc., 410 Terry Ave. North, Seattle, WA 98109-5210
Reference: https://phd.aws.amazon.com/phd/home#/event-log?Event%20ARN=arn:aws:health:global::event/RDS/AWS_RDS_SECURITY_NOTIFICATION/AWS_RDS_SECURITY_NOTIFICATION_bc104504-53c5-4b47-a698-8a05472c8f82&eventID=arn:aws:health:global::event/RDS/AWS_RDS_SECURITY_NOTIFICATION/AWS_RDS_SECURITY_NOTIFICATION_bc104504-53c5-4b47-a698-8a05472c8f82&eventTab=details&layout=vertical