Skip to main content

NetApp_Insight_2020.png 

NetApp Knowledgebase

How do we validate that encryption is enabled for specific AWS EBS volumes?

Views:
86
Visibility:
Public
Votes:
0
Category:
cloud-volumes-ontap-cvo
Specialty:
cloud
Last Updated:

 

Applies to

  • ONTAP Cloud using Amazon Web Services (AWS)
  • AWS Key Management Service (KMS)
  • Data At Rest Encryption
  • AWS Elastic Block Storage (EBS)

Answer

  • AWS KMS encrypts the EBS volumes.   The encryption occurs at the AWS level and not within ONTAP.   
  • To verify the EBS volumes are encypted use the AWS portal to view the volumes.

Example:

clipboard_e37e09149ab4799440d33947988a4015d.png
 

Additional Information

  • To encrypt ONTAP volumes you must use NetApp Volume Encryption (NVE) with supported external KMIP servers.  For more information see the Cloud Manager Security document.