Amazon Neptune now enforces SSL connections

Posted on: Feb 19, 2020

Amazon Neptune now enforces SSL connections to your database. You have the option to disable SSL in regions, such as US East (N. Virginia) or Europe (London), where both SSL and non-SSL connections are supported.

Amazon Neptune has always supported SSL connections to databases in all regions, but did not include the ability to enforce SSL connections. Customers asked us for an easy way to allow only SSL connections to their database. When new cluster is created, the newly introduced neptune_enforce_ssl parameter is enabled. You can disable SSL by changing the database cluster parameter from the AWS Management Console, or using the modify-db-cluster-parameter-group command through the AWS CLI. Databases that have this parameter enabled will only accept SSL connections.

For more details on using this feature, please refer to the Neptune User Guide