- When a user creates a database instance from DDS, the user can select Disk encryption and use the key provided by KMS to encrypt the disk of the database instance. For more information, see the Document Database Service User Guide.Figure 1 Encrypting data in DDS
You can use a custom key created on the KMS console for encryption.
- You can also call the required API of DDS to purchase encrypted DB instances. For details, see Document Database Service API Reference.