Modify Default EBS Encryption

Change the default EBS encryption settings for a region.

Source codePermissions

Usage

Input

Parameter Description Type Required Default value
enable Enable default EBS encryption bool No None
disable Disable default EBS encryption bool No None
change_kms_key Change the KMS Key used for encryption bool No None
kms_key_id KMS Key ID to use for encryption string If change_kms_key None
reset_kms_key Reset the KMS Key used for encryption to AWS EBS default bool No None
region Region for operation. Leave blank for session default string No Session Default
debug Increase log verbosity bool No False
silent Decrease log verbosity bool No False
output Output format
table
string No None
session Established session object No None

Output

This function has no output.

Examples

Enable the default EBS encryption setting for eu-west-2:

aaws ec2 modify_default_ebs_encryption --enable --region eu-west-2

Change the KMS key used for default EBS encryption in us-east-1:

aaws ec2 modify_default_ebs_encryption --change_kms_key --kms_key_id abcd1234-a123-456a-a12b-a123b4cd56ef