New featureMedium

Amazon RDS for SQL Server now supports restoring TDE databases on Multi-AZ instances

Amazon RDS for SQL Server now supports restoring TDE-enabled SQL Server databases to Multi-AZ instances and instances with read replicas using native backup and restore, eliminating the need to disable TDE or switch to Single-AZ configurations.

Amazon Relational Database Service (Amazon RDS) for SQL Server now supports restoring Transparent Data Encryption (TDE)-enabled SQL Server databases on Multi-AZ instances and instances configured with a read replica in the same region, using native backup and restore. Previously, restoring TDE-enabled databases was only available for Single-AZ instances, requiring users to disable TDE or migrate to a Single-AZ configuration before restoring encrypted databases. Users can now restore TDE-enabled database backups directly to Amazon RDS for SQL Server Multi-AZ instances and instances with read replicas in the same region. The process involves backing up the existing TDE certificate, storing it in Amazon S3, and restoring it to the Amazon RDS instance with the TDE option enabled. Then, the TDE-enabled database backup can be restored from Amazon S3 using Amazon RDS native backup and restore functionality. This simplifies migration and recovery workflows when both encryption at rest with TDE and the high availability of Multi-AZ deployments are required. This feature is available in all AWS Regions where Amazon RDS for SQL Server is supported.

Read the original AWS announcement

Related articles and terms

Running Managed Databases with Amazon RDS - Multi-AZ and Read Replica DesignEnsure high availability with Multi-AZ and distribute read workloads with read replicas. This article introduces Blue/Green Deployments and RDS Proxy usage patterns.Amazon RDSA fully managed service for operating major relational databases including MySQL, PostgreSQL, Oracle, and SQL Server in the cloudCentralized Backup Management with AWS Backup - Backup Plans and Cross-Region ProtectionManage backups for EC2, RDS, DynamoDB, and more under a unified policy. Covers Vault Lock WORM protection and automated restore testing.Most Common Well-Architected Review Findings - 5 Design Mistakes Engineers OverlookCovers the most frequently flagged design issues in AWS Well-Architected Reviews, focusing on five areas: single-AZ deployment, missing backups, underutilized logging, neglected cost optimization, and overly permissive security groups.AWS Availability Zone Design - How Physical Separation and Fault Isolation Create a Reliability AdvantageExamine the design philosophy behind AWS AZs as physically independent data center clusters, compare them with Azure and GCP availability zones, and analyze the differences in fault isolation maturity through real-world incident examples.