All geek questions in one place

AWS CloudFormation Autoscaling creates an encrypted EBS root volume with a client key

As a requirement, I need all my EBS volume to be encrypted with the KMS client (and not with the aws / ebs one error)

In the LaunchConfig properties of BlockDeviceMappings, I see the Encrypted property, but I don’t see the custom KMS in any case. I see the snapshotId property that allows me to point to an encrypted snapshot, but how will it look? Will there be every rectangle creating an empty volume from this snapshot?

What is the best way to achieve this? Is my only way to create volume in user data and attach it there?

+4
source share
1

AWS AutoScaling KMS EC2.

EC2 ec2:RunInstances, ec2:RequestSpotFleet ec2:RequestSpotInstances, KMS EBS. KMS , KMS, EBS.

Auto Scaling KMS. KMS. KMS, , .

: https://docs.aws.amazon.com/autoscaling/ec2/APIReference/API_Ebs.html

+1

Source: https://habr.com/ru/post/1693034/

More articles:


All Articles