Redshift Encryption Enabled

Log into the AWS Management Console.

Select the “Services” option and search for Redshift.

Scroll down the left navigation panel and choose “Clusters”.

Select the “Cluster” that needs to be verified and click on its identifier(name) from the “Cluster” column.

Scroll down the “Cluster” configuration page and check the “Encrypted” option under the “Cluster Database Properties”. If current status is set to “No” then the data stored on the cluster is not encrypted.

Repeat steps number 2 - 5 to verify other clusters.

Scroll down the left navigation panel and choose “Clusters” and click on “Quick launch cluster” button at the top menu to start a new cluster process.

Select the “Node type” from the dropdown menu and select the number of “Nodes” in the cluster.

Provide a unique “Cluster identifier (name)” to a new cluster and choose the “Master user password” and “Confirm password” of new cluster.

Under the “Launch your Amazon Redshift cluster - Advanced settings” select the “Database encryption” to “KMS” and select the “Master key” from dropdown menu.

Click on the “Continue” button at the bottom of the configuration page.

Review the new cluster configuration and click on the “Launch configuration” button at the bottom to launch a new cluster.

Once the new “Cluster Status” value changes to available and the “DB Health” status changes to healthy, the new cluster can used to load the existing data using Amazon Redshift Unload/Copy utility from unencrypted cluster to encrypted cluster.

Once the data migraton process is completed from unencrypted cluster to the new encrypted cluser delete the old unecncrypted cluster.

Select the older unecncyrpted cluster and click on the “Cluster” dropdown menu at the top and click on the “Delete” option.

On the “Delete Cluster” tab click on the “Delete” button to delete the unencrypted cluster.