Encrypted Root Device Volumes

Question 1

How do you encrypt snapshots of an encrypted RDV?

Answer 1

They are encrypted automatically

Question 2

How do you encrypt a volume that has been restored from an encrypted snapshot?

Answer 2

It is encrypted automatically

Question 3

Can you share snapshots from an RDV?

Answer 3

Yes, but only if they are unencrypted

Question 4

Can RDV snapshots be shared with other AWS accounts?

Answer 4

Yes, but only if they are unencrypted

Question 5

Can RDV snapshots be made public?

Answer 5

Yes, but only if they are unencrypted

Question 6

Can you encrypt a root device upon creation of an EC2 instance?

Answer 6

Yes

Question 7

How can you encrypt an unencrypted RDV?

Answer 7

1. Create a snapshot of the unencrypted RDV
2. Create a copy of the snapshot and select the encrypt option
3. Create an AMI from the encrypted snapshot
4. Use that AMI to launch new encrypted instances