This pattern describes how to implement transparent data encryption (TDE) in Amazon Relational Database Service (Amazon RDS) for SQL Server to encrypt data at rest.

Prerequisites and limitations

Prerequisites 

• An active AWS account

• An Amazon RDS for SQL Server DB instance

Product versions

Amazon RDS currently supports TDE for the following SQL Server versions and editions:

• SQL Server 2012 Enterprise Edition

• SQL Server 2014 Enterprise Edition

• SQL Server 2016 Enterprise Edition

• SQL Server 2017 Enterprise Edition

• SQL Server 2019 Standard and Enterprise Editions

For the latest information about supported versions and editions, see Support for Transparent Data Encryption in SQL Server in the Amazon RDS documentation.

Architecture

Technology stack

• Amazon RDS for SQL Server

Architecture

https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/enable-transparent-data-encryption-in-amazon-rds-for-sql-server.html?did=pg_card&trk=pg_card