Posted On: May 10, 2019
Previously, to launch an encrypted EBS backed instance from an unencrypted AMI, you first made an encrypted copy of the same AMI in each of your accounts. Now, with a single API call you can launch an encrypted instance without needing to make an encrypted copy of the AMI. This simplifies your process to launch instances with encrypted volumes and reduces your associated AMI storage costs. Similarly, you can also create encrypted EBS volumes directly from unencrypted snapshots by specifying encryption properties in your CreateVolume command, without needing to make additional snapshot copies.