Sample code to create a custom AWS Config rule to detect expiring Amazon RDS CA certificates - View it on GitHub