AWS provides various methods for encrypting AWS RDS resources which includes encrypting data-at-rest in the underlying DB instances, automated backups, read replicas, and snapshots.