Existing Aurora MySQL Cluster: Encryption at rest from zero to KMS
Have you ever wanted to encrypt an unencrypted Aurora MySQL Cluster with the mínimum downtime? You know you can not create an encrypted replica from an unencrypted Aurora cluster. So I’m going to explain how to encrypt an unencrypted Aurora MySQL database using the binlog replication feature. I will assume that you have a custom DNS record for the database that points to the Aurora cluster endpoint. Well, let’s do it! Enable binlog First, you have to enable BinLogs on the exi