Viktar Patotski ·
· security
· 10 min read Database Encryption at Rest: What Protects You vs What Checks a Box
Turning on RDS encryption satisfies the compliance question and stops almost none of the attacks that actually leak data. Here is what each layer of encryption at rest really defends against, on Postgres and AWS, and how to build the one that protects the sensitive field.