RDS root certificates must be updated by 3/5/2020 about control-tower HOT 5 CLOSED

Hey @gramidt, thank you very much for raising this issue, this is much appreciated.

At the moment we are creating the RDS database using Terraform here and by default AWS RDS instances are still created with the old cert (as described in the docs you linked).
I see that there is some work in progress towards adding an extra argument to the aws_db_instance Terraform resource that will allow to specify which AWS certificate to use hashicorp/terraform-provider-aws#10490. Using this argument seems like a good way to test creation of databases with the new certificate before it becomes default.

Then we will probably need to have a discussion about how to test this, especially on existing control-tower deployments with the old certificate.

from control-tower.

I have added a story in our backlog to update the cert.

from control-tower.

Thanks for raising this @gramidt, I'd been dutifully ignoring the many emails from AWS :)

Fixed in ee3dbde, now working on cutting a release.

from control-tower.

Thank you so much, @irbekrm and @DanielJonesEB!

I apologize for the delayed response, but I am very glad you two were able to get this resolved.

Have a great rest of your weekend!

from control-tower.

Closing this as it has now been resolved.

Thanks for your help, @gramidt !

from control-tower.