Redshift - Cannot restore an unencrypted snapshot to an encrypted Cluster

Question

I have classic Redshift dc2.large snapshot unencrypted, but i can not restore it because error.
*Cannot restore an unencrypted snapshot to an encrypted Cluster*

How can i restore snapshot?

Jiale Lin · Accepted Answer

1. **Create a New Unencrypted Cluster**:
   - First, create a new temporary Amazon Redshift cluster with the same configuration (such as node type, region, etc.) as your original cluster. This cluster should be **unencrypted**.
   - Ensure that the cluster is in the same region as the snapshot you want to restore.

```bash
   aws redshift create-cluster \
       --cluster-identifier temp-cluster \
       --node-type dc2.large \
       --master-username masteruser \
       --master-user-password masterpassword \
       --db-name mydb \
       --no-encrypted
   ```

2. **Restore the Snapshot to the Unencrypted Cluster**:
   - Once the temporary unencrypted cluster is set up, you can restore the unencrypted snapshot to this new cluster.
   
   ```bash
   aws redshift restore-from-cluster-snapshot \
       --cluster-identifier temp-cluster \
       --snapshot-identifier your-unencrypted-snapshot-id
   ```

3. **Create an Encrypted Snapshot**:
   - After successfully restoring the snapshot to the temporary unencrypted cluster, you can now create an encrypted snapshot of that cluster.
   
   ```bash
   aws redshift create-snapshot \
       --snapshot-identifier temp-cluster-encrypted-snapshot \
       --cluster-identifier temp-cluster \
       --encrypted
   ```

4. **Create a New Encrypted Cluster from the Encrypted Snapshot**:
   - Once you have the encrypted snapshot, create a new encrypted cluster from this snapshot.
   
   ```bash
   aws redshift restore-from-cluster-snapshot \
       --cluster-identifier new-encrypted-cluster \
       --snapshot-identifier temp-cluster-encrypted-snapshot \
       --encrypted
   ```

5. **Delete the Temporary Unencrypted Cluster**:
   - After the new encrypted cluster is up and running, you can delete the temporary unencrypted cluster to avoid any additional costs.
   
   ```bash
   aws redshift delete-cluster \
       --cluster-identifier temp-cluster \
       --skip-final-snapshot
   ```

Giang Nguyen · Answer

Thank you @Hikaru Nguyen. WORKED.
Just a note: I can't restore snapshot to existed cluster (step 1) (my snapshot is Automatically), so i just ignore step 1 and start from 2 -> WORKED.

I think it's so confusing when we just use simple command and able restore while on AWS Redshift Console, if i choose restore it will show error:* Cannot restore an unencrypted snapshot to an encrypted Cluster*. AWS should fix it to keep Encrypted is default based on snapshot.

Redshift - Cannot restore an unencrypted snapshot to an encrypted Cluster

Add your answer

Relevant content