{"id":"dynamodb-encryption-at-rest-always-on","text":"DynamoDB encryption at rest is always enabled and cannot be disabled; you can only choose between AWS owned key (free), AWS managed key, or customer managed key.","truth_value":"IN","source":"entries/2026/03/11/amazondynamodb-latest-developerguide-EncryptionAtResthtml.md","source_url":"","source_hash":"28218c124c391615","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"dynamodb-encryption-at-rest-always-on","truth_value":"IN","reason":"premise"}]}}