Search⌘ K
Home
Courses
AWS Certified SysOps Administrator - Associate Exam Prep

RDS Encryption and Monitoring

Explore how to implement encryption for data in transit and at rest in AWS RDS, utilize CloudWatch and enhanced monitoring to track database performance, configure event notifications for RDS instances, and analyze RDS logs and performance insights to optimize system operations.

We'll cover the following...

Encryption in RDS

All RDS databases support transport layer security (TLS) connections for in-flight encryption of data. To encrypt data at rest, we must specify encryption status using the AWS KMS service when launching the RDS database.

Points to remember:

  • In-flight encryption is supported by default.
  • If the primary database isn’t encrypted, the read replicas of the database can’t be encrypted.
  • Read replicas of an encrypted database are encrypted.
  • To encrypt an unencrypted database, we must take a snapshot of the database and encrypt the database when performing the restore operation.

Monitoring

By default, AWS CloudWatch collects several helpful ...