Chapter 7.3 - Protecting EBS Volumes with Encryption

Question 1

What are the fundamental characteristics of EBS Encryption?

Answer 1

Data at rest is encrypted inside the volume.

All data in flight moving between the instance and the volume is encrypted.

All snapshots are encrypted.

All volumes created from the snapshot are encrypted.

The encryption is end-to-end.

Question 2

What are the steps required to encrypt existing unencrypted EC2 instances?

Answer 2

Take a snap

Copy that snap and encrypt while copying

Create an AMI from the encrypted snap

Launch and EC2 instance from that AMI