Hacker News new | ask | show | jobs
by atmosx 532 days ago
When RDS is encrypted at rest, it means that the data stored in the database is encrypted while it resides on disk. Means that the data is protected against unauthorised access to raw storage.

The data accessed by the app is not encrypted, you can still work on the data as you would usually do. It's mostly a compliance thing. Not sure what level of security it _actually_ brings to the data itself, but most companies are okay with "encryption at rest".

1 comments

Encryption at rest is meant to protect data when the storage device is stolen or lost.