Flutekaze
when you create an ec2 snapshot, which s3 is it stored in? is it a random aws managed s3? how secure is it then?
1 Answers
Tiji Mathew
You take snapshot of the EBS Volume attached to the EC2 instance. The location of the snapshot on S3 is abstracted from us. However, we can access the snapshot through the API or the management console but cannot access it via S3.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-describing-snapshots.html
regarding the security of the snapshot, the snapshot of an encrypted EBS volume is always encrypted.
Refer to Section "Encryption support for snapshots" at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.html
You take snapshots of EBS Volumes attached to an EC2 instance. The snapshot location in the S3 bucket is not visible outside the snapshots UI / API calls.
See the documentation here: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-describing-snapshots.html
Regarding security, if your EBS volume is encrypted then the snapshot is also encrypted and accessible only through the snapshot UI/API to restore.