How to convert a unencrypted EBS to be encrypted
It's possible to copy an unencrypted EBS snapshot to an encrypted EBS snapshot. So the following process can be used:
- Stop your EC2 instance.
- Create an EBS snapshot of the volume you want to encrypt.
- Copy the EBS snapshot, encrypting the copy in the process.
- Create a new EBS volume from your new encrypted EBS snapshot. The new EBS volume will be encrypted.
- Detach the original EBS volume and attach your new encrypted EBS volume, making sure to match the device name (/dev/xvda1, etc.)