Description

When support was first added for CACertificateIdentifier (2021, or perhaps before) it could only be set in ModifyDBInstance. However, since Jan 2023 (aws/aws-sdk-go-v2@ce03945) it can be set during CreateDBInstance. This is preferable as it makes fresh builds quicker by around 1 minute (the time it takes for the Modify to complete).

Affected Resource(s) and/or Data Source(s)

• aws_db_instance

Potential Terraform Configuration

References

• aws/aws-sdk-go-v2@ce03945
• f-aws_rds_cluster: Support setting CA certificate on create and update #37108 - similar for DB clusters, although appears to be the first adding of CACertificateIdentifier at all for clusters.

Would you like to implement a fix?

None