How To Transfer an encrypted AMI to Another User Account

Question

Hi,
I have two instances which were in Lightsail (1. Windows Server 2. Ubuntu Linux), and I need to transfer them to another AWS account. I got instructions from support on how to go about it.
1. Create snapshots
2. Create an EC2 instance from the snapshot
3. Use the AMI as a baseline snapshot to transfer the server's instance to another account

The problem I'm facing in the last step is when I try to transfer the instance, I get the notification that the server's partitions are encrypted. I'm not sure how to go about fixing this.

Has anyone been able to solve this?

Answer

You can try to use Image Builder and share resources via RAM (Resource Access Manager). See below:
* https://docs.aws.amazon.com/imagebuilder/latest/userguide/cross-account-dist.html

* https://docs.aws.amazon.com/imagebuilder/latest/userguide/manage-shared-resources.html

Hope it helps.

Answer

There are full-proof ways, but I would suggest you try this https://aws.amazon.com/blogs/security/how-to-share-encrypted-amis-across-accounts-to-launch-encrypted-ec2-instances/

How To Transfer an encrypted AMI to Another User Account

Relevant content