cloud-platform
cloud-platform copied to clipboard
Check EBS snapshots are encrypted
Background
It's best practice to have snapshots encrypted. We have recently tied up some old snapshots and we should check that what we have is encrypted by default.
Approach
Check that EBS snapshots are created with encryption by default. If not, enable encryption as the default.
Definition of done
- [ ] We have EBS snapshots encrypted.
Reference
After testing unable to do a in place update due to the kind being statefulset that doesnt allow this type of update. Best action would be to delete the current volumes and allow them to create with the new default which is using gp3 and this is encrypted as default.
Raise story to delete old GP2 snapshots