Enabling TDE on Oracle SE database via Terraform

Question

Hi, I'm trying to enable TDE on my Oracle SE RDS instance via Terraform but getting the following error when attempting to add to an existing option group:

**Error: Error modifying DB Option Group: InvalidParameterValue: Unknown option: TDE**

https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.Oracle.Options.overview.html confirms the parameter name is TDE, and so does the example in the TF documentation: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_option_group (albeit their example is SQL rather than Oracle)

So why would TF be complaining ?  Any ideas welcome.

thx, Steve

Accepted Answer

Oracle SE does not support TDE. If TDE is a must for any reason, then you should switch to Oracle EE. However, you can choose to work with AWS options to encrypt your database, and you can do that with Oracle SE too.

See:
1. https://docs.aws.amazon.com/prescriptive-guidance/latest/evaluate-downgrading-oracle-edition/compare-features.html
2. https://docs.oracle.com/en/database/oracle/oracle-database/19/dblic/Licensing-Information.html#GUID-0F9EB85D-4610-4EDF-89C2-4916A0E7AC87__GUID-B8A99315-D5F4-49BB-AC6F-6D9FFC50CC57 (See Table 1-10).

Enabling TDE on Oracle SE database via Terraform

Relevant content