title: Which method to use for updating CA certificates for AWS RDS
body: <p>I currently need to update the CA certificates for my AWS RDS instance, and as far as I am aware there are two ways to do this: by modifying my DB instance or by applying DB instance maintenance (source: <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html</a>). </p>
  
  <p>Does it matter which method I choose? Is one way particularly better than the other/better in some circumstances? </p>