AWS Encrypt Root Volumes
We might have used and launched root volumes as part of EC2/EMR for umpteen times in our devops lifecycle. Until few weeks back, I have been encrypting in conventional way as below
- Create basic EC2 with required root volume size
- Created snapshot from the root volume, of the launched EC2
- Copy snapshot with an encryption key
- Use this newly copied snapshot, going forward
- Or, create an AMI with encrypted root volume, by selecting the just encrypted & created snapshot and use them ahead
Hooooooooooo, lots of work isnt it? I agree :-). It is not about creating AMI or using the encrypted volumes, but it is about doing the clean up of snapshots that were created as above
