# How to add ssl certificate config parameters for AWS RDS MySQL connection for metricbeat

**URL:** <https://discuss.elastic.co/t/how-to-add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/350080>\
**Category:** Beats\
**Tags:** filebeat, metricbeat\
**Created:** [December 28, 2023, 1:05pm UTC](https://discuss.elastic.co/t/how-to-add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/350080 "2023-12-28T13:05:22Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Chandrashekar](https://avatars.discourse-cdn.com/v4/letter/c/85e7bf/32.png) [@Chandrashekar](https://discuss.elastic.co/u/Chandrashekar)\
**Post date:** [December 28, 2023, 1:05pm UTC](https://discuss.elastic.co/t/how-to-add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/350080/1 "2023-12-28T13:05:22Z")

</div>

Hi

I am trying to configure the AWS RDS metric using metricbeat mysql module.

I have enabled the require\_secure\_transport ON for aws rds parametergroup

Below is the mysql.yml (/etc/metricbeat/modules.d/mysql.yml)

- module: mysql  
metricsets:
  - status  
period: 10s  
hosts: ["tcp(my\_rds\_endpoint:3306)/"]  
username: my\_username  
password: my\_password

ERROR: {"log.level":"error","@timestamp":"2023-12-28T10:58:23.514Z",  
"log.origin":{"file.name":"module/wrapper.go","file.line":256},"message":"Error fetching data for metricset mysql.status:  
Error 3159: Connections using insecure transport are prohibited while --require\_secure\_transport=ON.","service.name":"metricbeat","ecs.version":"1.6.0"}

I tried adding below parameters but still same issue.

- module: mysql  
metricsets:
  - status  
period: 10s  
hosts: ["tcp(my\_rds\_endpoint:3306)/"]  
username: my\_username  
password: my\_password  
ssl.enabled: true  
ssl.verification\_mode: full  
ssl.certificate\_authorities: ["/opt/ssl/global-bundle.pem"]  
logging.level: debug

Note: When i turned of require\_secure\_transport OFF metricbeat mysql module is working fine  
only issue with ssl,

Can anyone please help on this.

Thanks.

---

<div class="post-metadata">

**Author:** ![lalits](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lalits/32/107097_2.png) [@lalits](https://discuss.elastic.co/u/lalits)\
**Post date:** [January 2, 2024, 12:33pm UTC](https://discuss.elastic.co/t/how-to-add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/350080/2 "2024-01-02T12:33:41Z")

</div>

Are you not being able to use the corresponding module - [AWS rds metricset | Metricbeat Reference [8.11] | Elastic](https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-aws-rds.html) directly?

---

<div class="post-metadata">

**Author:** ![lalits](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lalits/32/107097_2.png) [@lalits](https://discuss.elastic.co/u/lalits)\
**Post date:** [January 2, 2024, 1:57pm UTC](https://discuss.elastic.co/t/how-to-add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/350080/3 "2024-01-02T13:57:46Z")

</div>

Earlier post on the same - [How to add ssl certificate for MySQL connection for metricbeat](https://discuss.elastic.co/t/how-to-add-ssl-certificate-for-mysql-connection-for-metricbeat/217851) and open issue - [[Metricbeat] Add TLS/SSL configuration options in the MySQL module · Issue #16133 · elastic/beats · GitHub](https://github.com/elastic/beats/issues/16133)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 30, 2024, 3:58pm UTC](https://discuss.elastic.co/t/how-to-add-ssl-certificate-config-parameters-for-aws-rds-mysql-connection-for-metricbeat/350080/4 "2024-01-30T15:58:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.