Home / server / Questions / 798443
In Process
Steve Rukuts
Asked: 2016-08-23 13:14:33 +0800 CST

Can I now replicate an encrypted RDS instance to another region?

  • 772

RDS offers encryption at rest, but this is incompatible with cross-region replication. The documentation states:

Because KMS encryption keys are specific to the region that they are created in, you cannot copy an encrypted snapshot from one region to another or replicate encrypted DB instances across regions.

However, it is now possible to upload a custom KMS master key. If I generate my own master key and upload it to both eu-west-1 and eu-central-1, is it possible to is it possible to replicate an encrypted RDS instance across regions?

The documentation does not say anything about this scenario. It's possible that it's now technically possible but the API does not permit it.

mysql mysql-replication amazon-web-services amazon-rds

1 Answers

  1. I asked this question on the AWS forums, and got an answer from someone at Amazon:

    As you noted, this is now technically possible but the RDS API does not yet support it. We are working on it but have not announced a release date. Stay tuned.

    This is excellent news - soon we won't have to choose between one or the other.

    • 1