Setting encrytion

Question

Hello and apologies in advance if this is an obvious / newbie question but I'm really nervous about updating my running instance of RDS in case I can't revert it.  I've done an RTFM and understand believe I should be able to just set an encryption option on RDS (I'm using SQL Server, called from an ASP.NET application running on Beanstalk) and then the data is encrypted at rest, that's it.  I don't have to make any other changes to my web app that access it.  Is it as simple as that or do I have to get key pairs to decrypt the data before my web site can use it?  Or any other option?  
  
Would this have any impact on the https settings?  
  
It's partly reassurance but mostly education I'm after as this is a burgeoning business and I don't want to change what's currently working smoothly.  However, I do need to encrypt the data in preparation for more data that will be added soon.  
  
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html

Phil · Accepted Answer

Encryption is enabled by default for RDS.  
You can confirm this by looking on the Configuration tab from the Console, under storage you should see Encryption Enabled = YES.  
  
If you do not specify custom KMS keys, you will get a default KMS key that RDS manages for you.  
  
hth,  
Phil

kamdarc · Answer

Thanks very much for that Phil and a big 'phew' from me.

Setting encrytion

Add your answer

Relevant content