Take Snapshots and Encrypt Root Filesystem (36)

  Amazon Web Services (AWS)

https://www.udemy.com/aws-certified-solutions-architect-associate/learn/v4/t/lecture/2050672?start=0

This lab did not work for me. After trying to launch a new instance based on my encrypted AMI, I got the error “No valid instance types found.”

It seems this only works with m3 instance types due to the Virtualization Type=Paravirtual, but there don’t seem to be any other real options available.</div

Take a Snapshot

  • Stop the instance before taking the snapshot.  This will ensure the OS and application cache is cleared and provide consistent data.
    • Actions > Instance State > Stop < [Yes, Stop]
  • Volumes > Select volume > Actions > Create Snapshot
    • Note you cannot encrypt this snapshot!

Copy the Snapshot

  • Snapshots > Select Snapshot > Actions > Copy
    • Select Region
    • Change Name?
    • Encrypt!  (Will use default key)

Create an Image from the Snapshot

  • Snapshots > Select Snapshot > Actions > Create Image
    • This creates a custom AMI (Amazon Machine Image)!

Launch a new instance from the new AMI

  • Dashboards > AMIs > Select AMI > [Launch]

Exam Tips

  • To create a snapshot for Amazon EBS volumes that serve as root devices, you should stop the instance before taking the snapshot.
  • Snapshots of encrypted volumes are encrypted automatically.
  • Volumes restored from encrypted snapshots are encrypted automatically.
  • You can share snapshots, but only if they are unencrypted.
    • These snapshots can be shared with other AWS accounts or made public, or even sold on the store.

LEAVE A COMMENT