AWS —  How to encrypt an existing EBS volume

AWS — How to encrypt an existing unencrypted EBS volume

An existing unencrypted volume and the data it contains may not be encrypted. Let us see 2 options to encrypt it.

Option 1: EBS Snapshot

• Create Snapshot of your unencrypted volume
• When the snapshot is complete, create a “Copy” of your snapshot and remember to enable ‘Encryption’.
• Select the CMK for KMS to use as required
• Create a new volume from the newly created snapshot
• As the snapshot is encrypted, …

aws copy data ebs encrypt encrypted may options rsync unencrypted