data encryption-at-rest in RDS vs S3

Question

Whose responsibility is to encrypt data-at-rest in RDS and S3?

Answer

AWS follows the shared responsibility model. In short AWS responsibility “Security of the Cloud” and Customer responsibility “Security in the Cloud”. In the cases where you store data in RDS and S3, the customer takes full responsibility for encryption. However both RDS and S3 provides you nesasary tools to encrypt the data at rest.

You can find more about shared responsibility principal at here - https://aws.amazon.com/compliance/shared-responsibility-model/
How to enable S3 data encryption can be found here - https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingEncryption.html
How to enable RDS encryption can be found here : https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html

data encryption-at-rest in RDS vs S3

Relevant questions

Can I use the RDS Postgresql S3 export query to replicate changes from RDS to S3?

RDS sql-server snapshot export to S3

RDS to S3 to RDS or Redshift near realtime

How to upload a parquet format file of RDS table data to S3 without using snapshots

Can I Import .sql files from Encrypted s3 bucket into Encrypted MySQL RDS instance?

RDS restore native backup and lazy loading from S3

encrypted db snapshot restore from S3 not working AWS RDS(mysql) console in an S3 bucket.