How to use asymmetric KMS encryption for AWS RDS postgreSQL database?

Question

I have a RDS instance and I am trying to choose a greater algorithm for encryption but it only lets me choose symmetric keys. I created a new asymmetric KMS key from "Customer managed keys" and choose "RSA_2048_KMS" as the key spec. Here is the key:

But when I try to create a new RDS instance - the list in encryption in the image below doesn't contain the new key. but when I create a symmetric key, I do see it. How can I choose an asymmetric key?

Thanks!

Answer 1

You cannot use asymmetric cryptography for encrypting data stored on S3, RDS, EBS, EFS, etc. The cryptography supported for those - including RDS is symmetric, AES 256 bit encryption.

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html

You cannot change the encryption setting of an RDS database once its created. Hope that was useful.