When using Amazon RDS, there may be times when the data held within your database needs to encrypted due to its sensitivity.  When RDS encryption is enabled, which uses the AES-256 algorithm, it ensures that all underlying storage that's used is encrypted, along with all associated read-replicas, automated backups, and snapshots, following the enablement without any further configuration needed. 

RDS encryption is offered at rest and is easily enabled by using the following database engines:

• Amazon Aurora
• MySQL
• MariaDB
• PostgreSQL
• Oracle
• Microsoft SQL Server