You created an RDS instance with storage_encrypted: true but the console shows encryption as disabled. What is the likely cause?

medium📝 Debug Q14 of 15

AWS - RDS and Relational Databases

You created an RDS instance with storage_encrypted: true but the console shows encryption as disabled. What is the likely cause?

AEncryption can only be enabled after instance creation.

BThe security group does not allow inbound traffic on the database port.

CThe IAM role lacks permissions to enable encryption.

DThe RDS instance was created from a snapshot that was not encrypted.

Step-by-Step Solution

Solution:

Step 1: Understand encryption behavior on RDS creation
Encryption must be enabled when creating the instance or from an encrypted snapshot.
Step 2: Identify snapshot encryption impact
If created from an unencrypted snapshot, encryption cannot be enabled later.
Final Answer:
The RDS instance was created from a snapshot that was not encrypted. -> Option D
Quick Check:
Unencrypted snapshot blocks encryption [OK]

Quick Trick: Encryption depends on snapshot encryption at creation [OK]

Common Mistakes:

Master "RDS and Relational Databases" in AWS

9 interactive learning modes - each teaches the same concept differently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

More AWS Quizzes