fix: Update RDS cert bundle (#2670)

* fix: Update RDS cert bundle

Signed-off-by: Anton Kukushkin <[email protected]>

* use s3 url

Signed-off-by: Anton Kukushkin <[email protected]>

* use CUSTOM_JDBC_CERT_STRING

Signed-off-by: Anton Kukushkin <[email protected]>

* bump cdk version

Signed-off-by: Anton Kukushkin <[email protected]>

* Revert "use CUSTOM_JDBC_CERT_STRING"

This reverts commit 2f7e552.

---------

Signed-off-by: Anton Kukushkin <[email protected]>

Author: kukushking

test_infra/poetry.lock

@@ -7,8 +7,6 @@ license = "Apache License 2.0"
 
 [tool.poetry.dependencies]
 python = ">=3.8, <4.0"
-"constructs" = ">=10.0.0,<11.0.0"
-"aws-cdk-lib" = "^2.125.0"
-"aws-cdk.aws-glue-alpha" = "^2.125.0a0"
-"aws-cdk.aws-redshift-alpha" = "^2.125.0a0"
-"aws-cdk.aws-neptune-alpha" = "^2.125.0a0"
+"aws-cdk-lib" = "^2.128.0"
+"aws-cdk.aws-glue-alpha" = "^2.128.0a0"
+"aws-cdk.aws-redshift-alpha" = "^2.128.0a0"

test_infra/pyproject.toml

@@ -5,7 +5,7 @@
 from aws_cdk import aws_glue_alpha as glue
 from aws_cdk import aws_iam as iam
 from aws_cdk import aws_kms as kms
-from aws_cdk import aws_neptune_alpha as neptune
+from aws_cdk import aws_neptune as neptune
 from aws_cdk import aws_rds as rds
 from aws_cdk import aws_redshift_alpha as redshift
 from aws_cdk import aws_redshiftserverless as redshiftserverless
@@ -493,7 +493,7 @@ def _setup_mysql(self) -> None:
                 "USERNAME": self.db_username,
                 "PASSWORD": self.db_password,
                 "JDBC_ENFORCE_SSL": "true",
-                "CUSTOM_JDBC_CERT": "s3://rds-downloads/rds-combined-ca-bundle.pem",
+                "CUSTOM_JDBC_CERT": "s3://aws-glue-assets-658066294590-us-east-1/certificates/global-bundle.pem",
             },
             subnet=self.glue_connection_subnet,
             security_groups=[self.db_security_group],