From 8831a809330a0dee547fb14cc6bd4cdc6f697777 Mon Sep 17 00:00:00 2001
From: AJ Jordan <alex@strugee.net>
Date: Mon, 18 Mar 2024 19:17:06 -0400
Subject: [PATCH] Bump RDS CA version (#51)

Followup to #50; should fix AWS nag emails about this.
---
 osem_rds/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/osem_rds/main.tf b/osem_rds/main.tf
index 2e87f7b..f9a23d9 100644
--- a/osem_rds/main.tf
+++ b/osem_rds/main.tf
@@ -39,5 +39,5 @@ resource "aws_db_instance" "osem" {
   storage_encrypted       = true
   vpc_security_group_ids  = [aws_security_group.osem_rds_security_group.id]
   backup_retention_period = 7
-  ca_cert_identifier      = "rds-ca-2019"
+  ca_cert_identifier      = "rds-ca-rsa2048-g1"
 }