Encryption at rest is supported for MySQL, Oracle PostgreSQL, SQL Server, MariaDB, and Aurora. Encryption is done using the AWS key management Service (KMS) service. Once your RDS instance is encrypted, the data stored at rest in the underlying storage is encrypted as are its automated backups read replies and snapshots.