Wondering how to encrypt Amazon RDS snapshots using a KMS key? We can help you.

Here, at Bobcares, we assist our customers with several AWS queries as part of our AWS Support Services.

Today, let us see how our Support Techs perform the encryption.

How to encrypt Amazon RDS snapshots using a KMS key?

You can’t take an encrypted snapshot of an unencrypted DB instance.

However, you can perform a workaround that achieves the same results.

Please note if you use Amazon Aurora, you can restore an unencrypted Aurora DB cluster snapshot to an encrypted Aurora DB cluster.

However, you must specify an AWS Key Management Service (AWS KMS) encryption key when you restore from the unencrypted DB cluster snapshot.

Today, let us see the steps followed by our Support Techs for the encryption:

1. Firstly, open the Amazon RDS console, and then choose Snapshots from the navigation pane.

2. Then, select the snapshot that you want to encrypt.

3. Under Snapshot Actions, choose Copy Snapshot.

4. Choose your Destination Region, and then enter your New DB Snapshot Identifier.

5. Then, change Enable Encryption to Yes.

6. Next, select your Master Key from the list.

7. Finally, choose Copy Snapshot.

After the snapshot status is available, the Encrypted field is set to “True” to indicate that the snapshot is encrypted.

Then, you can use this encrypted DB snapshot to restore the DB instance from the DB snapshot.

[Need help with the process? We’d be happy to assist]

Conclusion

In short, we saw how our Support Techs perform the RDS encryption.