Using SSL/TLS to encrypt a connection to a DB cluster - Amazon Aurora
Download certificate bundles
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: December 30, 2025.

Using SSL/TLS to encrypt a connection to a DB cluster

You can use Secure Socket Layer (SSL) or Transport Layer Security (TLS) from your application to encrypt a connection to a DB cluster running Aurora MySQL or Aurora PostgreSQL.

Download certificate bundles for Aurora

When you connect to your database with SSL or TLS, the database instance requires a trust certificate from Amazon RDS. Select the appropriate link in the following table to download the bundle that corresponds with the AWS Region where you host your database.

Viewing the contents of your CA certificate

To check the contents of your CA certificate bundle, use the following command: 

keytool -printcert -v -file global-bundle.pem