AWS - RDS and Relational Databases
You need to enable encryption for an existing unencrypted RDS instance without downtime. What is the recommended approach?
You need to enable encryption for an existing unencrypted RDS instance without downtime. What is the recommended approach?
hard📝 Application Q9 of 15
Step-by-Step Solution
Solution:
Step 1: Understand encryption limitations
You cannot enable encryption directly on an existing unencrypted RDS instance.Step 2: Use snapshot copy with encryption
Copy the snapshot with encryption enabled, then restore a new encrypted instance from it.Final Answer:
Create a snapshot, copy it with encryption enabled, then restore a new encrypted instance -> Option AQuick Check:
Encryption requires snapshot copy and restore [OK]
Quick Trick: Encrypt by snapshot copy and restore, not in-place [OK]
Common Mistakes:
- Trying to enable encryption directly on running instance
- Modifying instance without snapshot
- Confusing Multi-AZ with encryption
Master "RDS and Relational Databases" in AWS
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore AWS Quizzes