A company security policy mandates that all connections to databases must be encrypted. How can DBA enforce that all client connections to an Amazon Aurora PostgreSQL DB cluster are encrypted?

Answer options:

A.Set rds.force_ssl parameter to 1
B.Set –ssl-mode to REQUIRED
C.Set encrypt parameter to true
D.Execute ALTER USER SQL command with REQUIRE SSL option

Answer: A
Option A is CORRECT because the rds.force_ssl parameter must be set to 1 to require client connection to RDS databases to be encrypted.
Option B is incorrect because -ssl_mode option is used by the MySQL client when establishing a connection to a server.
Option C is incorrect because encrypt option is used by client applications to set connection encryption mode when connecting to a SQL Server database.
Option D is incorrect because ALTER USER SQL command can be used to require SSL for a specific user, not all clients.
Reference:
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.Security.html#AuroraPostgreSQL.Security.SSL