● Covered by 1 source · 1 reportMedium impact1 neutral
Amazon EBS Volume Clones now support cross-account copying and re-encryption
Key points
- EBS Volume Clones now support cross-account copying.
- Volumes can be re-encrypted with AWS KMS keys in target accounts.
- Facilitates using production data for dev/test in separate accounts.
- Sharing is managed via AWS Resource Access Manager (RAM).
Cross-Account EBS Volume Cloning Introduced
Amazon has extended its EBS Volume Clones capability to include cross-account copying. Previously, Volume Clones allowed instant point-in-time copies of EBS volumes only within the same Availability Zone. The new functionality enables users to replicate EBS volumes into other AWS accounts.
Enhanced Data Management and Security
This update allows for optional re-encryption of copied volumes using an AWS Key Management Service (AWS KMS) key within the target account. This provides a method to use current application data for development, testing, and experimentation in a secondary environment, while maintaining the isolation and protection of production data.
How Cross-Account Copying Works
To initiate a cross-account copy, the volume owner grants the target account access via AWS Resource Access Manager (RAM). The target account then accepts the resource share and can locate and copy the shared volume. This process can be performed through the Amazon EBS console or programmatically via APIs.
Encryption Considerations for Sharing
Users can share unencrypted volumes and volumes encrypted with a customer managed key (CMK). However, volumes encrypted with the default AWS managed key (AMK) cannot be shared. When copying a shared volume encrypted with a CMK, the CMK must also be accessible to the target account.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Amazon EBS Volume Clones now allow users to copy EBS volumes across different AWS accounts and optionally re-encrypt them with an AWS KMS key in the target account. This feature enables developers to use production data for development and testing in isolated secondary environments.