MySQL HeatWave now allows you to use your own security certificates for encrypted connections. You can choose to use a certificate from the Oracle Cloud Infrastructure (OCI) Certificates Service when you create a DB system. You can also change the DB system's certificate when needed. OCI Certificates Service can create, import, and manage all your certificates.

You must configure a resource principal to grant permission to the DB system to access certificates managed by the Certificates Service.

See Advanced Option: Connections, Updating Security Certificate, and Resource Principals