Encrypted Amazon RDS DB snapshots shared with another account can't be restored without first copying it locally in the shared account.

Question

Hey there, 
I'm looking for a way to share an encrypted RDS snapshot and restore it from the shared tab in the (shared account). 
More information:
Today we have encrypted snapshots in our main account, and we created a shared KMS to share the snapshots between accounts.
The process is working, and we can see the shared snapshot in the shared account, but the restored option is disabled. 
The snapshot is a big one over 3TB. Copying it locally **is not an option**.
Could someone please help me and tell me why AWS is not letting us restore the encrypted shared snapshot directly without copying it?

Accepted Answer

You have to copy the snapshot to the new account before you can restore it.

But yeah, snapshots need to encrypted with a kms key. Kms key needs to be accessible by the account where you are looking to restore the snapshot.

Encrypted Amazon RDS DB snapshots shared with another account can't be restored without first copying it locally in the shared account.

Conteúdo relevante