Problem:
If you try to copy an encrypted EBS snapshot or AMI image between AWS accounts, you may encounter the following error in your Skeddly log:
E:8/19/2019 11:43:51 AM [15]: Error executing request: Encrypted snapshots with EBS default key cannot be shared
When an EBS snapshot or AMI image is copied between AWS accounts, the snapshots must be shared with the target AWS account.
However, EBS snapshots that are encrypted using the aws/ebs
KMS key cannot be shared.
Solution:
In order to copy the EBS snapshot or AMI image to another AWS account, the snapshot/image must first be copied within the same AWS account, using a non-default (ie. not aws/ebs
) KMS key.
Once the duplicate is created, it can be shared with the target AWS account and copied.