aws/rds: Switch AWS RDS CA bundle to the officially documented URL (#…

…3307)
google · Aug 24, 2023 · 55ed7f7 · 55ed7f7
1 parent d6f90a4
commit 55ed7f7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/aws/rds/rds.go b/aws/rds/rds.go
@@ -41,7 +41,7 @@ type CertPoolProvider interface {
 }
 
 // caBundleURL is the URL to the public RDS Certificate Authority keys.
-const caBundleURL = "https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem"
+const caBundleURL = "https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem"
 
 // CertFetcher pulls the RDS CA certificates from Amazon's servers. The zero
 // value will fetch certificates using the default HTTP client.