By using AWS re:Post, you agree to the Terms of Use

Redshift data encryption performance


Hello all,

We currently have 200+ TB of data in our redshift cluster, but are not using encryption. To use datashares to share this data across redshift instances, it looks like we'll need to switch encryption on, and we are apprehensive to do so because the performance impact isn't clear for changing this setting. It is also unclear what length of time we should expect for the data to be encrypted.


2 Answers

Hello, It is very hard to estimate the time to encrypt all that data. That is the reason we don't use any table or reference for the time that will take. On the other hand, you should always perform an operation like that, on a low period for your cluster usage to reduce impact - On performance, per my experience there is not a significant impact but the best option is for you to turn encryption on, test and if it doesn't fit your needs, to turn it off.

please, also keep in mind to use datashare you have to be running on RA3 node types to support this operation.

Hope it helps!

answered a month ago

It is hard to estimate the exact time but The faster Classic resize feature enables an unencrypted cluster to encrypt it much more quickly.

As of today, the Faster Classic Resize option to restore an unencrypted snapshot into an encrypted cluster or to change the encryption key is available only through the AWS CLI. When triggered, the restored cluster operates in read/write mode immediately. The encryption state change for restored blocks that are unencrypted operates in the background, and newly ingested blocks continue to be encrypted. Please refer to the following blog.

answered a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions