A database specialist needs to replace the encryption key for an Amazon RDS DB instance. The database specialist needs to take immediate action to ensure security of the database.
Which solution will meet these requirements?
A.
Modify the DB instance to update the encryption key. Perform this update immediately without waiting for the next scheduled maintenance window.
B.
Export the database to an Amazon S3 bucket. Import the data to an existing DB instance by using the export file. Specify a new encryption key during the import process.
C.
Create a manual snapshot of the DB instance. Create an encrypted copy of the snapshot by using a new encryption key. Create a new DB instance from the encrypted snapshot.
D.
Create a manual snapshot of the DB instance. Restore the snapshot to a new DB instance. Specify a new encryption key during the restoration process.
C: It's work
1.Create a manual snapshot for your DB instance.
2. In the navigation pane, choose Snapshots.
3. Select the manual snapshot that you created.
4. Choose Actions, and then choose Copy Snapshot.
5. Under Encryption, select Enable Encryption.
6. For AWS KMS Key, choose the new encryption key that you want to use.
7. Choose Copy snapshot.
8. Restore the copied snapshot Create new DB Instance.
https://repost.aws/knowledge-center/update-encryption-key-rds
I think C.
You can enable encryption for an Amazon RDS DB instance when you create it, but not after it's created. However, you can add encryption to an unencrypted DB instance by creating a snapshot of your DB instance, and then creating an encrypted copy of that snapshot.
https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/encrypt-an-existing-amazon-rds-for-postgresql-db-instance.html
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
MultiAZ
1 year, 3 months agorrshah83
1 year, 4 months agodbkorn
1 year, 5 months agomarll88
1 year, 5 months agonarvaez
1 year, 5 months ago