Can I use both TDE and EBS encyption with RDS Oracle and RDS Oracle custom ?
Can I use both TDE and EBS encyption with RDS Oracle and RDS Oracle custom ? Is this a recommended practice ? Will it add to the latency?
- Topics
- Database
- Language
- English
- Newest
- Most votes
- Most comments
Yes, both Transparent Data Encryption (TDE) and Amazon Elastic Block Store (EBS) encryption can be utilized with Amazon RDS for Oracle and RDS Custom for Oracle. However, implementing both requires careful consideration of best practices and potential performance implications.
Impact on Latency
- TDE encryption may introduce performance overhead, especially for large tablespaces.
- EBS encryption has minimal impact on performance since AWS handles encryption at the storage level.
- Combining both may slightly increase latency, but the impact depends on workload size and query complexity.
Hey,
Hope you're keeping well.
Yes, you can enable both Oracle Transparent Data Encryption (TDE) and EBS encryption for RDS Oracle and RDS Custom for Oracle. TDE encrypts data at the tablespace level within the database, while EBS encryption secures the storage layer using KMS keys. Using both is supported and often chosen for defense-in-depth, though it can add a small amount of CPU overhead from TDE on top of the negligible performance impact from EBS encryption. If latency is a concern, benchmark your workload after enabling TDE to ensure it meets your performance requirements. You can configure EBS encryption at instance creation and manage TDE through Oracle's DBMS keystore commands.
Thanks and regards,
Taz
Relevant content
- asked 3 years ago
- asked 2 years ago
- asked 2 years ago
- AWS OFFICIALUpdated a year ago
