Context An AWS Glue job that consumes the Chargebee API begins failing with: The same request works in Postman. This pattern typically appears after a certificate chain rotation on the API provider side combined with an outdated trust store in the execution environment. Chargebee announced updates related to its TLS certificate chain (DigiCert G2 becoming