ReleaseBytes
aws AWS News Blog ·

AWS details cross-account Volume Clones for Amazon EBS

blogsecurityawsgaengineer
announcement

This AWS blog post details the cross-account copy capability for Amazon EBS Volume Clones, an extension to the Volume Clones feature introduced last year. This functionality allows users to create point-in-time copies of EBS volumes into other AWS accounts, with optional re-encryption using AWS KMS in the target account. It enables developers and testers to refresh secondary environments with current application data from production, enhancing isolation and data protection. The post covers technical specifics including sharing via AWS Resource Access Manager, encryption requirements, monitoring options, and the necessity of copying volumes within the same Availability Zone.

  • →Overview of cross-account EBS Volume Clones
  • →Process for sharing and copying EBS volumes across accounts
  • →Important technical details for cross-account EBS cloning
  • →Regional availability of cross-account EBS Volume Clones
Notes (4) ›
  • Overview of cross-account EBS Volume Clones

    The post describes the extension of EBS Volume Clones to support copying volumes across AWS accounts, enabling re-encryption with AWS KMS keys in target accounts. This capability allows users to refresh development, testing, and experimentation environments with production data securely.

  • Process for sharing and copying EBS volumes across accounts

    Volume owners must first grant access to the target account via AWS Resource Access Manager (RAM). The target account can then locate and copy the shared volume, with programmatic sharing and copying also supported via APIs.

  • Important technical details for cross-account EBS cloning

    Key considerations include encryption rules for unencrypted or customer-managed key (CMK) encrypted volumes, monitoring through AWS CloudTrail and Amazon EventBridge, and pricing based on volume size. Copies must be created in the same Availability Zone as the source volume.

  • Regional availability of cross-account EBS Volume Clones

    Cross-account volume clones for Amazon EBS are available in all AWS Regions that support Amazon EBS Volume Clones. Users are encouraged to try the feature in the Amazon EC2 console and provide feedback.

Read the original announcement →

https://aws.amazon.com/blogs/aws/introducing-amazon-ebs-volume-clones-across-aws-accounts/

Related releases