What should the Database Specialist do to correct the Data Analysts’ inability to connect?
Restart the DB cluster to apply the SSL change.
Instruct the Data Analysts to download the root certificate and use the SSL certificate on the connection string to connect.
Add explicit mappings between the Data Analysts’ IP addresses and the instance in the security group assigned to the DB cluster.
Modify the Data Analysts’ local client firewall to allow network traffic to AWS.
Explanations:
Restarting the DB cluster is not required for SSL/TLS to take effect. SSL/TLS settings are applied when the client connects, not when the DB cluster restarts.
SSL/TLS requires the use of the root certificate to establish a secure connection. The Data Analysts need to download the root certificate and specify it in the connection string to successfully connect using SSL.
The security group configuration already allows network traffic from all corporate IP addresses, so adding explicit mappings for the Data Analysts’ IPs is unnecessary.
The issue is not with the Data Analysts’ local firewall but with SSL/TLS configuration for secure connectivity. The firewall is not blocking the network traffic but likely not using the required SSL certificates.