amazon-web-services - 无法从加密源创建跨区域未加密只读副本

Question

我正在尝试通过云形成模板在西部地区为东部的RDS数据库创建只读副本。我收到错误:

Cannot create a cross region unencrypted read replica from encrypted source.

但是，我尝试提供 kms key id 并将 CopyTagsToSnapshot 标记为 true 。这是我的云形成的样子:

Resources:
  MyDB:
   Type: AWS::RDS::DBInstance
   Properties:
    SourceDBInstanceIdentifier: !Ref ReadReplicaURL
    AllocatedStorage: !Ref DBAllocatedStorage
    CopyTagsToSnapshot: true
    DBSubnetGroupName: !Ref DBSubnetGroup
    VPCSecurityGroups:
     - !Ref DBSG1
    KmsKeyId: !Ref DBEncryptionKey
    StorageEncrypted: true
    DBInstanceClass: !Ref DBInstanceClass
    DBInstanceIdentifier: !Ref DBInstanceIdentifier
    Iops: !Ref DBIops
    MonitoringInterval: !Ref DBMonitoringInterval
    Engine: !Ref Engine
    MonitoringRoleArn: !Ref DBMonitoringRoleARN
    Port: !Ref DBPort
    PreferredMaintenanceWindow: !Ref DBPreferredMaintenanceWindow
    StorageType: io1

Answer 1

我从 AWS 代表那里得到的答案:

遗憾的是，目前无法通过 CloudFormation 创建加密的 RDS 跨区域只读副本。有一个活跃的功能请求来实现此功能，我已将您的声音添加到其中。该功能一旦实现，将在此页面公布:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/ReleaseHistory.html