Services Covered
RDS
Lab description
In this lab a database created without the encryption will be encrypted.
Learning Objectives
- Create a database without encryption
- Create a encrypted snapshot of DB
- Restore a DB with encryption
Lab date
28-11-2021
Prerequisites
- AWS account
Lab steps
- In RDS dashboard create a MySQL instance of a database, but leave the Enable encryption field unchecked.
After creating the database there’s no way to enable encryption.
- Create a snapshot from existing database instance. It is not possible to encrypt the snapshot in this stage. We need to encrypt the snapshot while taking a copy of it. Under the Manual snapshots, select the created snapshot and click on Actions. Click Copy snapshot from the options. Under settings, provide the following details. New DB Snapshot Identifier: Enter test-snapshot-encrypted. Under Encryption, check Enable Encryption. Leave the master key as default as it is a demo. (IMPORTANT) Click on the Copy snapshot button.
- Restore DB Instance from the encrypted snapshot. Click on the encrypted snapshot and click on Actions. Click on Restore snapshot from the options.Under DB instance class, select Burstable classes (including t classes) and select db.t3.micro. Under Encryption, you can see the Enable Encryption is enabled and cannot make changes since the snapshot is encrypted. Click on Restore DB instance.
- Change the name of the original DB Instance. Change the name of the Restored DB Instance to the original DB Instance name.
- Delete the unencrypted RDS DB Instance and snapshot.
