Help Center/ Relational Database Service/ FAQs/ Product Consulting/ Will Backups Be Encrypted After Disk Encryption Is Enabled for My RDS Instance?
Updated on 2024-10-08 GMT+08:00

Will Backups Be Encrypted After Disk Encryption Is Enabled for My RDS Instance?

  • RDS for MySQL:

    If you enable disk encryption during instance creation, the disk encryption status and the key cannot be changed later. Disk encryption will not encrypt backup data stored in OBS. To enable backup data encryption, contact customer service.

  • RDS for PostgreSQL:

    If you enable disk encryption during instance creation, the disk encryption status and the key cannot be changed later. Disk encryption will also encrypt backup data stored in OBS.

  • RDS for SQL Server:

    If you enable disk encryption during instance creation, the disk encryption status and the key cannot be changed later. Disk encryption will not encrypt backup data stored in OBS.

If disk encryption or backup data encryption is enabled, keep the key properly. Once the key is disabled, deleted, or frozen, the database will be unavailable and data may not be restored.

  • If disk encryption is enabled but backup data encryption is not enabled, you can restore data to a new instance from backups.
  • If both disk encryption and backup data encryption are enabled, data cannot be restored.