Content

Target customers: customers who require encryption of database files in businesses such as finance, securities, insurance, and government affairs. Features released: The TDE function of RDS MySQL 5.7 used with the High-availability Edition and local SSDs supports BYOKs. You can manage BYOKs and enable the rotation of multiple BYOKs by using Key Management Service (KMS). Note that you cannot disable TDE after you enable it. If you use an existing BYOK, do not disable it, include it into a key deletion plan, or delete its materials. Otherwise, the BYOK becomes unavailable and your data can no longer be encrypted or decrypted. If you revoke the authorization relationship between your RDS MySQL instance and KMS, your RDS MySQL instance becomes unavailable after you restart it.