Technologies Encryption at Rest

Encryption at Rest is just that: when the data/HDD/SSD/etc is not actively being used, it is encrypted. This is done for a number of reasons but the important reason is to prevent others from accessing the data without your permission your logical flow.

S3, EBS, Glacier, RDS, DynamoDB are some of the AWS Services that can encrypt your data while resting. AWS attempts to do this for you by default using a default encryption key, but you can request to use your own key stored in AWS Key Management Service (KMS). UCI OIT recommends this over using the default key.

You will usually find the settings related to this in the setup wizard for any of the related services, ex: EC2, S3, DynamoDB