diff --git a/rds.tf b/rds.tf
index 51b53a0..bffa174 100644
--- a/rds.tf
+++ b/rds.tf
@@ -18,6 +18,7 @@ resource "aws_db_instance" "airflow" {
   identifier                 = local.rds_name
   vpc_security_group_ids     = [aws_security_group.airflow.id]
   db_subnet_group_name       = aws_db_subnet_group.airflow[0].name
+  storage_encrypted 	     = true
 
   tags = local.common_tags
 }
diff --git a/variables.tf b/variables.tf
index efbf2ac..f8f765d 100644
--- a/variables.tf
+++ b/variables.tf
@@ -243,7 +243,7 @@ variable "rds_password" {
 variable "rds_instance_class" {
   type        = string
   description = "The class of instance you want to give to your rds db"
-  default     = "db.t2.micro"
+  default     = "db.t2.small"
 }
 
 variable "rds_availability_zone" {