Can I Encrypt the Disk After Purchasing an RDS DB Instance?
You can enable disk encryption when purchasing an RDS DB instance. For details, see Create a DB Instance.
After an instance is created, the disk encryption status and the key cannot be changed.
If you want to configure disk encryption for a created instance, perform the following operations:
- Restore data to a new instance from backups and enable disk encryption for the new instance.
- Use Data Replication Service (DRS) to migrate data from the instance to an encrypted instance.
Parent topic: Product Consulting