Home icon

Choose the right type of AWS KMS key to encrypt Amazon RDS and Aurora Global Database

Database Blog

This article explains the important differences and considerations when deciding on using either single-Region or multi-Region AWS Key Management Service (KMS) keys for Amazon RDS and Aurora Global Database deployments.

Specifically, the article covers:

  • Overview of AWS KMS and its benefits for data encryption and key management
  • Types of KMS keys: customer managed keys, AWS managed keys, and AWS owned keys
  • Differences between multi-Region and single-Region customer managed keys
  • How AWS services treat multi-Region keys and their usage for client-side encryption
  • Key management, pricing, and quotas for multi-Region and single-Region keys
  • Considerations for using AWS managed keys for Amazon RDS and Aurora
Go to article

The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.

Related articles

Apr 13
2026
Options for changing AWS KMS encryption key for Amazon RDS databases
Feb 12
2024
Make EOA private keys compatible with AWS KMS
Feb 28
2024
Optimize AWS KMS decryption costs for Database Activity Streams
May 15
2024
Encrypt your database connection using SSL encryption to Amazon RDS Custom for SQL Server

The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.