We have a PostgreSQL database hosted on AWS RDS. When it was created using cloudformation I set it to be encrypted, but didn't set the encryption key. As such it was set up to use the default encryption key.
I've since been told that there is a company standard that all RDS instances should have their own keys.
I've created the new key using cloudformation and associated it with the RDS instance, but when I deploy this template it wants to delete and recreate the database.
I'm not that familiar with how all this works and I'm after a procedure that doesn't result in us losing data. A bit of downtime won't hurt us if that is required.