Managed databases - encrypted?

Question

Hi,  
  
does anyone know whether Lightsail managed databases (and specifically PostgreSQL) use encrypted storage (i.e. encryption at rest)?  
I can't find any information about that in the docs, and our client requires encryption at rest.  
  
Thanks,  
M.

Yiran-AT-AWS · Accepted Answer

Hello,  
  
Thanks for using Lightsail!  
  
Except the smallest database bundle, Lightsail automatically encrypts your data at rest and in motion for increased security by using keys that Lightsail manages on your behalf.   
  
Best,  
Yiran

Michael · Answer

Great, thank you!

David G · Answer

I looked at the available documentation and couldn't find anything that specifically indicated that the databases were encrypted at rest.  
  
That said ...   
  
Lightsail databases are probably using the same infrastructure that the rest of Lightsail is using ... and, according to the FAQ (https://aws.amazon.com/lightsail/faq/)...   
  
> Does Lightsail block storage offer encryption?  
> Yes, to help keep your data secure, all Lightsail attached disks and disk snapshots are encrypted at rest by default, using keys that Lightsail manages on your behalf. Lightsail also provides encryption of data as it moves between Lightsail instances and attached disks.

Michael · Answer

Hi David,  
  
thank you for your reply!  
  
Do take care however, because according to another thread on this forum the root volume (i.e. your machine's own disk) is not encrypted. Only attached disks and snapshots are. See: {message:id=881826}  
  
This is the reason I'll also be using an attached disk, even though the root volume has more than enough space for my needs.

David G · Answer

> _mvdamme wrote:_    
> Do take care however, because according to another thread on this forum the root volume (i.e. your machine's own disk) is not encrypted. Only attached disks and snapshots are. See: {message:id=881826}  
  
Ah, thanks for pointing that out ... I missed that bit.  
  
Filed for future reference.

Managed databases - encrypted?

Add your answer

Relevant content