Daniel López Azaña

Theme

Social Media

Blog

Tag: Security

How to share an AMI between 2 AWS accounts

| |
Copy AMI using customer managed key for encryption

If you have an unencrypted AMI you can share it with another AWS account directly without doing anything special. But if the AMI is encrypted, things get complicated, as the destination account won't have the encryption key to decrypt its snapshots and you won't be able to share it. In this article I'll show you how to properly share an encrypted AMI between two AWS accounts using customer managed KMS keys, allowing you to securely share your EC2 instance images across different AWS accounts.