{"id":17071,"date":"2025-12-02T12:22:27","date_gmt":"2025-12-02T06:52:27","guid":{"rendered":"https:\/\/www.skynats.com\/?p=17071"},"modified":"2025-12-02T12:22:29","modified_gmt":"2025-12-02T06:52:29","slug":"how-to-configure-documentdb-tls-settings-via-aws-console","status":"publish","type":"post","link":"https:\/\/www.skynats.com\/blog\/how-to-configure-documentdb-tls-settings-via-aws-console\/","title":{"rendered":"How to Configure DocumentDB TLS Settings via AWS Console"},"content":{"rendered":"\n

The following steps show how to identify your parameter group, verify AWS DocumentDB TLS settings, and modify them all from the console.<\/p>\n\n\n\n

Identify the Cluster\u2019s Parameter Group<\/strong><\/h2>\n\n\n\n
    \n
  1. Open the AWS DocumentDB TLS console<\/mark><\/a> and search for document db service<\/li>\n\n\n\n
  2. In the navigation pane, choose Clusters.<\/li>\n\n\n\n
  3. Select the cluster you want to manage.<\/li>\n\n\n\n
  4. Open the Configuration tab.<\/li>\n\n\n\n
  5. Scroll to Cluster details and locate Cluster parameter group.<\/li>\n<\/ol>\n\n\n\n

    If your cluster uses a default parameter group (example: default.docdb4.0), you cannot modify TLS settings yet. You must create a custom cluster parameter group.<\/p>\n\n\n\n

    Create a Custom Parameter Group<\/strong><\/h3>\n\n\n\n

    If you do not already have a custom parameter group:<\/p>\n\n\n\n

    1. In the left menu, select Parameter groups.<\/p>\n\n\n\n

    2. Choose Create.<\/p>\n\n\n\n

    3. Fill in:<\/p>\n\n\n\n

    4. Parameter group family: select the version that matches your cluster<\/p>\n\n\n\n

      \n
    1. Group type: db-cluster<\/li>\n\n\n\n
    2. Name: docdb-5<\/li>\n\n\n\n
    3. Description: Custom parameter group for\u00a0 TLS settings<\/li>\n<\/ol>\n\n\n\n

      5. Choose Create.<\/p>\n\n\n\n

      Your custom parameter group is now ready for editing.<\/p>\n\n\n\n

      View the Current TLS Parameter Value<\/strong><\/h2>\n\n\n\n
        \n
      1. In the AWS DocumentDB TLS console, open Parameter groups.<\/li>\n\n\n\n
      2. Select the custom parameter group you want to modify.<\/li>\n\n\n\n
      3. Scroll to the Cluster parameters section.<\/li>\n\n\n\n
      4. Search for: tls<\/li>\n\n\n\n
      5. Review:<\/li>\n<\/ol>\n\n\n\n

        Cluster parameter name<\/p>\n\n\n\n

          \n
        1. Current value<\/li>\n\n\n\n
        2. Allowed values<\/li>\n<\/ol>\n\n\n\n

          Modify the TLS Parameter<\/strong><\/h3>\n\n\n\n

          1. In your parameter group, find the row for tls.<\/p>\n\n\n\n

          2. Select the radio button next to it.<\/p>\n\n\n\n

          3. Choose Edit.<\/p>\n\n\n\n

          4. In the Modify tls dialog box, select the desired value:<\/p>\n\n\n\n

          \n

          a. enabled<\/em><\/p>\n\n\n\n

          b. disabled<\/em><\/p>\n\n\n\n

          c. tls1.2+<\/em><\/p>\n\n\n\n

          d. tls1.3+<\/em><\/p>\n<\/div>\n\n\n\n

          5. Choose Modify cluster parameter to save.<\/p>\n\n\n\n

          This updates the parameter group but does not apply the change until the cluster reboots.<\/p>\n\n\n\n

          Apply the Parameter Group to the Cluster<\/strong><\/h3>\n\n\n\n

          If your cluster was already using this parameter group, you can skip this step.<\/p>\n\n\n\n

          Otherwise:<\/p>\n\n\n\n

            \n
          1. Open Clusters.<\/li>\n\n\n\n
          2. Select your cluster.<\/li>\n\n\n\n
          3. Choose Modify.<\/li>\n\n\n\n
          4. Under DB cluster parameter group, choose your custom group (e.g., docdb-custom-tls).<\/li>\n\n\n\n
          5. Choose Continue, then Modify cluster.<\/li>\n<\/ol>\n\n\n\n

            The new parameter group is now associated with the cluster.<\/p>\n\n\n\n

            Reboot the AWS DocumentDB TLS instance<\/strong><\/h4>\n\n\n\n

            To ensure the change is applied across the entire cluster, reboot each instance in the cluster.<\/p>\n\n\n\n