Skip to content

Commit

Permalink
Patch 378 (#399)
Browse files Browse the repository at this point in the history
* Update ebs-encrypted-snapshots.md

* Update step2.png

Updated image in step 2

* Update step3.png

Updated image for step 3

* Update step4.png

Updated image in step 4

* Update step5.png

Updated image for step 5

* Update ebs-encrypted-snapshots.md

Updated step 5

* Update step7.png

Updated image for step 7

* Update step8.png

Updated image for step 8

* Update step9.png

Updated image for step 9

* Update ebs-encrypted-snapshots.md

updated step 9

* Update step7.png

Updated image in step 7

* Update ebs-encrypted-snapshots.md

Updated step 8

* Update step10.png

Updated image for step 10

* Update ebs-encrypted-snapshots.md

Updated step 10

* Update step11.png

Updated image in step 11

* Update step12.png

Updated image in step 12

* Update step13.png

Updated image for step 13

* Update step14.png

Updated image in step 14

* Update step15.png

Updated image in step 15

* Update ebs-encrypted-snapshots.md

Updated step 15

* Update step16.png

Updated image in step 16

* Update step17.png

Updated image in step 17
  • Loading branch information
shuklaalok87 authored Nov 4, 2022
1 parent 2c3e2ed commit 7197c4b
Show file tree
Hide file tree
Showing 16 changed files with 7 additions and 7 deletions.
14 changes: 7 additions & 7 deletions en/aws/ec2/ebs-encrypted-snapshots.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,21 +15,21 @@
| **Recommended Action** | Configure volume encryption and delete unencrypted EBS snapshots. |

## Detailed Remediation Steps
1. Log into the AWS Management Console.
1. Log in to the AWS Management Console.
2. Select the "Services" option and search for EC2. </br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step2.png"/>
3. Scroll down the left navigation panel and choose "Snapshots". </br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step3.png"/>
4. Select the "Snapshot" that needs to be verified and click on its name from the "Name" column.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step4.png"/>
5. Scroll down the page and under "Description" check for "Encrypted". If the "Encrypted" option is showing "Not Encrypted" then the selected the "EBS Snapshot" is not encrypted.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step5.png"/>
5. Scroll down the page and under "Details" check for "Encrypted". If the "Encrypted" option is showing "Not Encrypted" then the selected the "EBS Snapshot" is not encrypted.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step5.png"/>
6. Repeat the steps number 2 - 5 to check other "EBS Snapshot" in the AWS region.</br>
7. Select the unencrypted "EBS Snapshot" that needs to be encrypted and click on the "Actions" button at the top panel and click on the "Copy" option.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step7.png"/>
8. In the "Copy Snapshot" dialog box select the box "Encrypt this snapshot" next to "Encryption" and choose the "Master key" from the dropdown menu.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step8.png"/>
9. Click on the "Copy" button to copy the selected "EBS Snapshot". </br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step9.png"/>
10. Select the new EBS snapshot and click on the "Actions" button at the top panel and click on the "Create Volume" option.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step10.png"/>
7. Select the unencrypted "EBS Snapshot" that needs to be encrypted and click on the "Actions" button at the top panel and click on the "Copy snapshot" option.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step7.png"/>
8. In the "Copy Snapshot" dialog box select the box "Encrypt this snapshot" next to "Encryption" and choose the "KMS key" from the dropdown menu.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step8.png"/>
9. Click on the "Copy snapshot" button to copy the selected "EBS Snapshot". </br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step9.png"/>
10. Select the new EBS snapshot and click on the "Actions" button at the top panel and click on the "Create Volume from snapshot" option.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step10.png"/>
11. In the "Create Volume" dialog box verify the "Encryption" option is enabled.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step11.png"/>
12. Click on the "Create Volume" button to create the new "EBS Encrypted Volume".</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step12.png"/>
13. Scroll down the left navigation panel and click on the "Volumes".</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step13.png"/>
14. Select the volume that is not encrypted and click on the "Action" button at the top and click on the "Detach Volume".</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step14.png"/>
15. In the "Detach Volume" dialog box click on the "Yes,Detach" button. </br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step15.png"/>
15. In the "Detach Volume" dialog box click on the "Detach" button. </br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step15.png"/>
16. Select the newly encrypted EBS volume and click on the "Action" button at the top and click on the "Attach Volume".</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step16.png"/>
17. In the "Attach Volume" dialog box select the EC2 instance and device name for the attachment.</br> <img src="/resources/aws/ec2/ebs-encrypted-snapshots/step17.png"/>
18. Repeat steps number 7 - 17 to ensure "EBS snapshots" are encrypted at rest.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step10.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step11.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step12.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step13.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step14.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step15.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step16.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step17.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step3.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step4.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step5.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step7.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step8.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified resources/aws/ec2/ebs-encrypted-snapshots/step9.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 7197c4b

Please sign in to comment.