Help Center/ Data Encryption Workshop/ Service Overview/ KMS/ Cloud Services with KMS Integrated/ Encrypting Data in RDS
Updated on 2022-09-15 GMT+08:00
View PDF

Encrypting Data in RDS

  • When a user purchases a database instance from Relational Database Service (RDS), the user can select Disk encryption and use the key provided by KMS to encrypt the disk of the database instance. For more information, see the Relational Database Service User Guide.
    Figure 1 Encrypting data in RDS

    There are two types of CMKs that can be used:

    • The default master key rds/default created by KMS
    • CMKs that you create on the KMS console using KMS-generated key materials
  • You can also call the RDS APIs to purchase encrypted database instances. For details, see the Relational Database Service User Guide.