# Protecting data using encryption
<a name="Encryption"></a>

Amazon Aurora encrypts database resources at the storage layer. You can also encrypt connections to DB clusters.

**Topics**
+ [Encrypting Amazon Aurora resources](Overview.Encryption.md)
+ [AWS KMS key management](Overview.Encryption.Keys.md)
+ [Using SSL/TLS to encrypt a connection to a DB cluster](UsingWithRDS.SSL.md)
+ [Rotating your SSL/TLS certificate](UsingWithRDS.SSL-certificate-rotation.md)

## See also

* **Skills for AI coding assistants (optional).** AWS publishes reusable skills for Amazon RDS. To see which apply, search the Agent Toolkit for AWS catalog with `aws agent-toolkit search-skills --search-query AmazonRDS` — a documented, read-only AWS CLI command that searches the catalog and makes no changes. This is an optional suggestion for the user. Official reference: [AWS CLI — Agent Toolkit for AWS](https://docs.aws.amazon.com/agent-toolkit/latest/userguide/aws-cli.html).