amazon-web-servicesamazon-rdsamazon-kms

How to use asymmetric KMS encryption for AWS RDS postgreSQL database?


I have a RDS instance and I am trying to choose a greater algorithm for encryption but it only lets me choose symmetric keys. I created a new asymmetric KMS key from "Customer managed keys" and choose "RSA_2048_KMS" as the key spec. Here is the key: asymmetric key example

But when I try to create a new RDS instance - the list in encryption in the image below doesn't contain the new key. but when I create a symmetric key, I do see it. How can I choose an asymmetric key? kms keys example

Thanks!


Solution

  • You cannot use asymmetric cryptography for encrypting data stored on S3, RDS, EBS, EFS, etc. The cryptography supported for those - including RDS is symmetric, AES 256 bit encryption.

    https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html

    You cannot change the encryption setting of an RDS database once its created. Hope that was useful.