Schemas stored in the Schema Registry are always encrypted at rest using a service-managed KMS key. Q: How can I privately connect to AWS Glue Schema Registry? You can use AWS PrivateLink to connect your data producer’s VPC to AWS Glue by defining an interface VPC endpoint for AWS Glue.