Aurora PostgreSQL Upgrade Blocked - Need Help
# support
s
Trying to upgrade staging Aurora PostgreSQL 12.22→13+ to stop Extended Support charges but getting error: Db cluster medplumstaging-backenddatabasecluster8b2f7305-3dagj0jrnj3w cannot be in the inaccessible-encryption-credentials-recoverable state Tried both AWS console and CDK deploy by adding rdsInstanceversion - same error. Any suggestions with this encryption credentials issue during Aurora upgrades? What's the best approach to resolve this? #RDS
@rahul1 @reshma ,any suggestions?
i
@sandydasari This error indicates that your Aurora cluster's encryption credentials are in a recoverable but currently inaccessible state, which blocks major version upgrades
what does
Copy code
aws kms describe-key --key-id <your-kms-key-id>
output for you?
s
Copy code
{
  "KeyMetadata": {
    "AWSAccountId": "977099021799",
    "KeyId": "5f350bc0-2fd1-43bc-b8bf-85f87a6b41c2",
    "Arn": "arn:aws:kms:us-east-1:977099021799:key/5f350bc0-2fd1-43bc-b8bf-85f87a6b41c2",
    "CreationDate": "2025-05-06T18:11:14.312000+05:30",
    "Enabled": true,
    "Description": "Default key that protects my RDS database volumes when no other key is defined",
    "KeyUsage": "ENCRYPT_DECRYPT",
    "KeyState": "Enabled",
    "Origin": "AWS_KMS",
    "KeyManager": "AWS",
    "CustomerMasterKeySpec": "SYMMETRIC_DEFAULT",
    "KeySpec": "SYMMETRIC_DEFAULT",
    "EncryptionAlgorithms": [
      "SYMMETRIC_DEFAULT"
    ],
    "MultiRegion": false
  }
}
149 Views