upgraded NAC's admin RDS DB instance class from T2 to T3 and enabled …

…performance optimisation
ministryofjustice · Jun 20, 2024 · 475f457 · 475f457
1 parent ab90b0c
commit 475f457
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 3 deletions.
diff --git a/modules/admin/db.tf b/modules/admin/db.tf
@@ -7,7 +7,7 @@ resource "aws_db_instance" "admin_db" {
   allow_major_version_upgrade = false
   apply_immediately           = var.db.apply_updates_immediately
   delete_automated_backups    = var.db.delete_automated_backups
-  instance_class              = "db.t2.medium"
+  instance_class              = "db.t3.medium"
   identifier                  = var.prefix
   name                        = replace(var.prefix, "-", "_")
   username                    = var.db.username
@@ -26,7 +26,9 @@ resource "aws_db_instance" "admin_db" {
 
   enabled_cloudwatch_logs_exports = ["audit", "error", "general", "slowquery"]
 
-  parameter_group_name = aws_db_parameter_group.admin_db_parameter_group_v8.name
+  parameter_group_name         = aws_db_parameter_group.admin_db_parameter_group_v8.name
+  performance_insights_enabled = true
+  ca_cert_identifier           = "rds-ca-rsa2048-g1"
 
   tags = var.tags
 }

diff --git a/modules/admin/restore_db.tf b/modules/admin/restore_db.tf
@@ -13,7 +13,7 @@ resource "aws_db_instance" "admin_db_restored" {
   allow_major_version_upgrade = false
   apply_immediately           = var.db.apply_updates_immediately
   delete_automated_backups    = true
-  instance_class              = "db.t2.medium"
+  instance_class              = "db.t3.medium"
   identifier                  = "${var.prefix}-restored"
   name                        = replace(var.prefix, "-", "_")
   username                    = var.db.username

diff --git a/modules/admin_read_replica/radius_read_replica.tf b/modules/admin_read_replica/radius_read_replica.tf
@@ -20,6 +20,8 @@ resource "aws_db_instance" "admin_read_replica" {
   deletion_protection             = false
   option_group_name               = aws_db_option_group.mariadb_audit_v8.name
   enabled_cloudwatch_logs_exports = ["audit", "error", "general", "slowquery"]
+  performance_insights_enabled = true
+  ca_cert_identifier           = "rds-ca-rsa2048-g1"
 
   lifecycle {
     ignore_changes = [