Home icon

Amazon RDS for SQL Server enables encrypting native backups using server-side encryption with AWS KMS keys (SSE-KMS)

News

Amazon RDS for SQL Server now supports enhanced encryption for native backups using AWS KMS keys (SSE-KMS):

  • Native backup files (.bak) in Amazon S3 can now be encrypted using customer-specific KMS keys
  • Previously, backups were automatically encrypted with Amazon S3-managed keys (SSE-S3)
  • Customers must update KMS key policies to grant access to RDS backup service
  • Requires specifying @enable_bucket_default_encryption parameter in backup stored procedure
  • Feature available in all AWS Regions supporting Amazon RDS for SQL Server

This enhancement provides customers with greater control and additional protection for their SQL Server database backups.

Go to article

The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.

Related articles

Dec 10
2024
Amazon RDS for SQL Server Supports new custom parameters for native backup and restore
Aug 15
2025
Amazon RDS for Db2 now supports cross-region automated backups for encrypted databases
May 15
2024
Encrypt your database connection using SSL encryption to Amazon RDS Custom for SQL Server
Jul 30
2024
Implementing a fall forward strategy from Amazon RDS for SQL Server Transparent Data Encryption (TDE) and Non-TDE Enabled databases to self-managed SQL Server

The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.