Docker Compose Entrypoint for AWS RDS SSL Certificate Trust (UI works, API fails)

1

Metabase UI successfully connects to AWS RDS databases with SSL certificate: AWS Global CA Bundle (rds-ca-ecc384-g1)

but API-created database connections fail with PKIX path building failed

The UI handles certificate trust automatically behind the scenes, but when using POST /api/database, the Java TrustStore lacks the RDS CA certificates, causing SSL handshake failures for API automation.

Any one tried API request to create data connection with AWS Global CA Bundle SSL ?

Please advice.

2

The frontend UI uses the API too. Trace the requests it makes and duplicate them. There’s probably an API parameter that passes the bundle through.

I don’t see any reference to certificates or bundles in the API docs, but those are famously incomplete.