RDS証明書更新の際に再起動が発生するかどうかの確認方法

無慈悲に訪れるRDS証明書更新の影響（再起動するかどうかの部分）を確認する方法メモ

DBエンジンバージョン確認

aws rds describe-db-instances | jq '.DBInstances[] | select(.DBInstanceIdentifier | startswith("app-")) | {"Name": .DBInstanceIdentifier, "Engine": .Engine, "EngineVersion": .EngineVersion}'
{
  "Name": "app-prod",
  "Engine": "postgres",
  "EngineVersion": "15.5"
}
{
  "Name": "app-stg",
  "Engine": "postgres",
  "EngineVersion": "15.5"
}

SupportsCertificateRotationWithoutRestartの確認

• trueだとSupportsCertificateRotationWithoutRestartがサポートされており再起動は発生しない

aws rds describe-db-engine-versions --engine postgres --engine-version 15.5 --profile mobilico |jq '.DBEngineVersions[].SupportsCertificateRotationWithoutRestart'
true

参考

www.k-friendly.com

docs.aws.amazon.com

SupportsCertificateRotationWithoutRestart Indicates whether the engine version supports rotating the server certificate without rebooting the DB instance.

Type: Boolean

Required: No