1.Select a region for specific region use this key only
2.Go to KMS ( Key Management Service ) => create key
3.Select the key type (symmetric) => key uses (encrypt and decrypt )=> next
4.Type Alias (key name) => next
5.Select Define key administrative permissions (AWSServiceRoleForRDS) => next
6.Select Define key usage permissions (AWSServiceRoleForRDS)
7.Other AWS Account => add another AWS account=> input another account ID like (819089808765) => next =>> finish
1.first, create a snapshot form database for another instance
2.Go to RDS => select DB => form actions => select Take a snapshot
3.Got to Snapshots
4.Select Snapshot RDS
5.Copy selected snapshot for another Region ( if need to another AWS Region )
a.Actions=> copy snapshot
b.Select Destination Region like Singapore (for new instance Region)
6.Encryption
a.AWS KMS key => select custom KMS key (which you created exist )
b.Copy snapshot (need some time to create )
c.Got to your Region like (Sydney to Singapore ) which region select for snapshot
1.Go to RDS => select snapshot => select DB snapshot => Actions => Share Snapshot
2.Need to AWS account id ( you can find from AWS account profile )
3.Like 801783636085
4.Add => save
5.Again go to KMS => got to selected KMS KEY
6.Copy ARM like (arn:aws:kms:ap-southeast-1:819096608765:key/3949a47f-758i-4bc8-8e96-deb5e658b5fg)
7.Share this ARM key with another account, which is using this snapshot-like (819096608765) this user.
1.Go to Security Group => Create Security Group
2.Security group names like (all-db-security-for-postgresql)
3.Inbound rules => TCP => anywhere
4.Outbound rules => TCP => anywhere
5.Create security group
1.Select your AWS account and select Region
2.Go to RDS => select snapshots ( from left sidebar ) => Shared With me
3.Select snapshot => Actions => copy Snapshot
4.Select destination Region
5.Input new DB Snapshot Identifier (name )
6.AWS KMS key
a.3Select Enter a key ARN
b.Input Amazon Resource Name (ARN) this ARN is Shared with you from Snapshot shared account like
(arn:aws:kms:ap-southeast-1:816096808765:key/3949a47f-751b-4bc3-8e76-deb5e658b5fg)
c.Auto Varified field like (From Account, KMS Key ID)
d.Copy Snapshot (need to sometime )
e.Must select VPC security group (firewall)
f.Select Existing VPC security groups (which one is you create exists) all-db-security-for-postgresql
1.When status is Available then
2.Select snapshot => Actions => Restore Snapshot
3.Configure DB instance settings =>
4.Restore DB instance
5.Status Creating
6.When Available then Successfully created
7.Got to this database => copy Endpoint and port => try to connect this database with this end point