What is true about backups of encrypted AWS RDS instances?

What is true about backups of encrypted AWS RDS instances?

• A. They are non-encrypted by default
• B. They must be manually encrypted after creation
• C. They remain encrypted
• D. They can only be stored in a different region

Answer: (C)

Backups of encrypted AWS RDS instances remain encrypted. When you enable encryption for an RDS instance, all automated snapshots and manual snapshots created from that instance are also encrypted automatically. This means that the data protection and confidentiality achieved through encryption are maintained even in the backup representations, ensuring that sensitive data remains secure throughout the backup lifecycle. This feature is crucial for compliance and security best practices, as it helps prevent unauthorized access to sensitive information during backup operations. The AES-256 encryption used by AWS provides a robust solution for protecting data at rest, which includes backups, maintaining the integrity and confidentiality of your database information.

Backups of encrypted AWS RDS instances remain encrypted. When you enable encryption for an RDS instance, all automated snapshots and manual snapshots created from that instance are also encrypted automatically. This means that the data protection and confidentiality achieved through encryption are maintained even in the backup representations, ensuring that sensitive data remains secure throughout the backup lifecycle.

This feature is crucial for compliance and security best practices, as it helps prevent unauthorized access to sensitive information during backup operations. The AES-256 encryption used by AWS provides a robust solution for protecting data at rest, which includes backups, maintaining the integrity and confidentiality of your database information.