On SQL Server, is Always Encrypted mode possible?

Question

SQL Server offers an Always Ecrypted mode that encrypts specific columns. It is available as per Microsoft's docs [here](https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database-engine?view=sql-server-ver16).

I would like to set up SQL Server Always Encrypted mode on AWS. Can anyone point to the relevant AWS guide for this? 
I have found a guide which details using SQL Server Always Encrypted on RDS [here](https://aws.amazon.com/blogs/database/set-up-always-encrypted-with-amazon-rds-for-sql-server/). However, this guide focuses on storing the keys on Windows Certificate Store. I would like to explore using KMS for this.

I have 2 related questions: 
1. Is SQL Server Always Encrypted mode supported on RDS or EC2 or both? 
2. Can I use KMS to store the encryption keys on SQL Server Always Encrypted?

Thanks!

Didier Durand · Answer

Hi,

There is a blog post on your exact topic: https://aws.amazon.com/blogs/database/set-up-always-encrypted-with-amazon-rds-for-sql-server/

Please, follow it to implement Always Encrypted mode in your account.

Didier

On SQL Server, is Always Encrypted mode possible?

Add your answer

Relevant content