aws AWS What's New ·

RDS for SQL Server supports TDE restore on Multi-AZ instances

dataawsengineeraws-s3aws-rds
feature

Amazon RDS for SQL Server now allows restoring Transparent Data Encryption (TDE)-enabled databases on Multi-AZ instances and read replicas using native backup and restore. This feature simplifies migration and recovery workflows by enabling high availability for encrypted databases, previously a limitation to Single-AZ instances. It requires backing up the TDE certificate to S3 and restoring it to the RDS instance with TDE enabled. The capability is available in all supported AWS Regions.

  • Restore TDE databases to Multi-AZ and read replica instances
  • Simplified migration and recovery for encrypted databases
  • Availability and further information
Features (1)
  • Restore TDE databases to Multi-AZ and read replica instances

    Amazon RDS for SQL Server now supports restoring Transparent Data Encryption (TDE)-enabled databases on Multi-AZ instances and instances with a read replica in the same region. This is achieved through native backup and restore functionality. Previously, TDE restore was limited to Single-AZ instances, necessitating workarounds for encrypted databases in high-availability configurations.

Enhancements (1)
  • Simplified migration and recovery for encrypted databases

    This enhancement simplifies migration and recovery workflows by allowing direct restores of TDE-enabled database backups to Amazon RDS for SQL Server Multi-AZ instances and read replicas. Users need to back up their TDE certificate to Amazon S3 and restore it to the RDS instance with TDE enabled before performing the database restore.

Notes (1)
  • Availability and further information

    This feature is available in all AWS Regions where Amazon RDS for SQL Server is supported. For more details, refer to the Amazon RDS for SQL Server User Guide.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/07/rds-sql-server-supports-tde-for-maz/

Related releases