The security team enforces all connections to Amazon RDS databases to be encrypted in transit using SSL/TLS. How can a user obtain the root certificate?

Answer options:

A.Download it from https://s3.amazonaws.com/rds-downloads/rds-ca-2019-root.pem.
B.Download it from AWS Management Console.
C.Generate it using openssl tool.
D.Generate it using AWS Certificate Manager.

Answer: A
Option A is CORRECT because Amazon RDS root certificates are available for download at https://s3.amazonaws.com/rds-downloads/rds-ca-2019-root.pem.
Option B is incorrect because the Amazon RDS root certificate is not available for download from the AWS Management Console. Instead, it can be downloaded from https://s3.amazonaws.com/rds-downloads/rds-ca-2019-root.pem.
Option C is incorrect because OpenSSL is a command-line tool that can be used to generate self-signed certificates. It is not used to obtain an Amazon RDS root certificate.
Option D is incorrect because AWS Certificate Manager is not integrated with Amazon RDS.
Reference:
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html