use rds-ca-2019 by default

drpebcak · Jan 15, 2020 · c6f510c · c6f510c
1 parent 3c1ba72
commit c6f510c
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -24,6 +24,7 @@ resource "aws_docdb_cluster_instance" "cluster_instances" {
   identifier         = "${var.name}-${count.index}"
   cluster_identifier = aws_docdb_cluster.api_docdb.id
   instance_class     = var.cluster_instance_class
+  ca_cert_identifier = var.ca_cert_identifier
 }
 
 resource "aws_docdb_cluster_parameter_group" "api_docdb" {

diff --git a/variables.tf b/variables.tf
@@ -60,3 +60,9 @@ variable "apply_immediately" {
   description = "Specifies whether any cluster modifications are applied immediately, or during the next maintenance window."
   type        = bool
 }
+
+variable "ca_cert_identifier" {
+  default     = "rds-ca-2019"
+  description = "Optional, identifier of the CA certificate to use for DB instance"
+  type        = string
+}