Which solution will meet this requirement?
Update the parameter group in use by the DB instance, and set the require_secure_transport parameter to ON.
Connect to the database, and use ALTER USER to enable the REQUIRE SSL option on the database user.
Update the security group in use by the DB instance, and remove port 80 to prevent unencrypted connections from being established.
Update the DB instance, and enable the Require Transport Layer Security option.
Explanations:
Therequire_secure_transportparameter enforces SSL/TLS encryption for all connections to the RDS instance, ensuring that all communications are encrypted in transit.
TheREQUIRE SSLoption is an SQL command used for MySQL user-level SSL enforcement, but it does not enforce encryption at the RDS instance level, which is required in this case.
Security groups control network traffic, not encryption. Removing port 80 only blocks HTTP traffic, but does not enforce encryption for MySQL connections.
There is noRequire Transport Layer Securityoption in RDS settings. The encryption enforcement is done via therequire_secure_transportparameter.
My best guess is:
Update the parameter group in use by the DB instance, and set the require_secure_transport parameter to ON.
If I’m not mistaken, the answer is:
Update the parameter group in use by the DB instance, and set the require_secure_transport parameter to ON.