Category Archives: AWS

EBS Default Encryption Enables Launching Encrypted Instances From Unencrypted AMI Snapshots

Posted on July 27, 2019 by Grischa Ekart

Previously (before end of May 2019), you had to encrypt the snapshot backing an AMI if you wanted to launch an instance with encrypted root volumes. This had some consequences for sharing AMIs: not only had AMIs to be shared … Continue reading →

Posted in AWS, Cloud | Tagged , , , | Comments Off on EBS Default Encryption Enables Launching Encrypted Instances From Unencrypted AMI Snapshots

AWS IAM Version and SID traps

Posted on November 20, 2018 by Grischa Ekart

In a IAM policy JSON, if you omit the version string, you are heading for trouble: If you do not include a Version element, the value defaults to 2008-10-17, but newer features, such as policy variables, will not work with … Continue reading →

Posted in AWS, Uncategorized | Tagged , | Comments Off on AWS IAM Version and SID traps