151k views
0 votes
An Amazon RDS Read Replica is being deployed in a separate region. The master database is not encrypted but all data in the new region must be encrypted. How can this be achieved?

1 Answer

4 votes

Final answer:

To encrypt an Amazon RDS Read Replica in a new region, you need to create a snapshot of the master database, copy and encrypt the snapshot, and then create the Read Replica from the encrypted snapshot. This allows the data to be encrypted in the new region.

Step-by-step explanation:

To achieve encryption for an Amazon RDS Read Replica in a separate region when the master database is not encrypted, you can take the following steps: Create a snapshot of your unencrypted master database. Copy the snapshot and enable encryption for the copy. This process will create an encrypted copy of the snapshot. Finally, launch a new Read Replica in the different region using the encrypted snapshot. When you create the Read Replica, specify the encrypted snapshot as the source.

This process ensures that your data is encrypted in the new region, even if the original master database wasn't encrypted. Keep in mind that there may be additional steps or considerations depending on the specific setup and requirements of your Amazon RDS configuration.

User Yellowjacket
by
7.8k points