diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..fcfc53f
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,2 @@
+# 0.1.0 (Unreleased)
+* Initial draft
diff --git a/db.tf b/db.tf
index adc69b0..7f11ecf 100644
--- a/db.tf
+++ b/db.tf
@@ -1,3 +1,7 @@
+locals {
+  ca_cert_identifier = "rds-ca-rsa2048-g1"
+}
+
 resource "aws_rds_cluster_instance" "cluster_instances" {
   count              = var.instance_count
   identifier         = "${local.resource_name}-instance-${count.index}"
@@ -5,6 +9,7 @@ resource "aws_rds_cluster_instance" "cluster_instances" {
   instance_class     = var.instance_class
   engine             = aws_rds_cluster.this.engine
   engine_version     = aws_rds_cluster.this.engine_version
+  ca_cert_identifier = local.ca_cert_identifier
 
   performance_insights_enabled = var.enable_performance_insights
 }