An alert raised in Wiz.IO requires the Administrator to identify DMS service certificates that have have an expired ValidTo date . Then check if the certificate Step 1: Idenify list of certificates associated with the DMS service aws dms describe-certificates --query "Certificates[].[CertificateIdentifier,CertificateArn,ValidFromDate,ValidToDate]" Step 2: Identify if there are any endpoints with the certificate the has an expired endpoint aws dms describe-endpoints --query "Endpoints[?CertificateArn=='arn:aws:dms:us-west-1:99999999:cert:UUUUUUUUUUUUU'].[EndpointIdentifier,CertificateArn]" Read more →