# Add ssl certificate config parameters for AWS RDS MySQL connection for metricbeat

**URL:** <https://discuss.elastic.co/t/add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/355228>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [March 12, 2024, 12:56pm UTC](https://discuss.elastic.co/t/add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/355228 "2024-03-12T12:56:14Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Chandrashekar](https://avatars.discourse-cdn.com/v4/letter/c/85e7bf/32.png) [@Chandrashekar](https://discuss.elastic.co/u/Chandrashekar)\
**Post date:** [March 12, 2024, 12:56pm UTC](https://discuss.elastic.co/t/add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/355228/1 "2024-03-12T12:56:14Z")

</div>

Hi

I am trying to configure the AWS RDS metric using metricbeat mysql module.

I have enabled the require\_secure\_transport ON for aws rds parametergroup

Below is the mysql.yml (/etc/metricbeat/modules.d/mysql.yml)

- module: mysql  
metricsets:
  - status  
period: 10s  
hosts: ["tcp(my\_rds\_endpoint:3306)/"]  
username: my\_username  
password: my\_password

ERROR: {"log.level":"error","@timestamp":"2023-12-28T10:58:23.514Z",  
"log.origin":{"file.name":"module/wrapper.go","file.line":256},"message":"Error fetching data for metricset mysql.status:  
Error 3159: Connections using insecure transport are prohibited while --require\_secure\_transport=ON.","service.name":"metricbeat","ecs.version":"1.6.0"}

I tried adding below parameters but still same issue.

- module: mysql  
metricsets:
  - status  
period: 10s  
hosts: ["tcp(my\_rds\_endpoint:3306)/"]  
username: my\_username  
password: my\_password  
ssl.enabled: true  
ssl.verification\_mode: full  
ssl.certificate\_authorities: ["/opt/ssl/global-bundle.pem"]  
logging.level: debug

Note: When i turned of require\_secure\_transport OFF metricbeat mysql module is working fine  
only issue with ssl,

Can anyone please help on this.

Thanks.

Follow up : [How to add ssl certificate config parameters for AWS RDS MySQL connection for metricbeat](https://discuss.elastic.co/t/how-to-add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/350080)

lates update: used both global and region specific certificates, we are still getting the same issue. our aws rds aurora certificate authority is rds-ca-rsa4096-g1.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 9, 2024, 2:56pm UTC](https://discuss.elastic.co/t/add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/355228/2 "2024-04-09T14:56:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.