-
Hello LR1,
Thank you for raising this point. To clarify: encryption for an RDS instance can only be enabled at the time of creation. You cannot simply switch on encryption for an already running DB instance. The snapshot workaround is a migration path. You take a snapshot of the unencrypted DB, create an encrypted copy of that snapshot, and then restore a new encrypted DB instance from it. This does not change the existing DB. It only creates a new encrypted one.
So, that option is actually a correct statement. I hope this clears up the contradiction and helps you confidently identify the right answers.
Best regards,
JR @ Tutorials Dojo
