涓婃鏇存柊鏃堕棿锛?020 骞?12 鏈?14 鏃?/i>
濡備綍纭畾鎴戠殑Amazon 绯荤粺鏄犲儚 (AMI) 鎴栧揩鐓ф槸鍚﹀凡鍔犲瘑锛屼互鍙婂鏋滃凡鍔犲瘑锛屾槸浣跨敤 AWS 鎵樼鐨勭敤鎴蜂富瀵嗛挜 (CMK) 杩樻槸鐢ㄦ埛绠＄悊鐨?CMK 鍔犲瘑鐨勶紵
绠€鐭弿杩?/h2>鎮ㄥ彲浠ヤ娇鐢ㄦ帶鍒跺彴鎴栦娇鐢?AWS 鍛戒护琛岀晫闈?(AWS CLI) 鏉ユ煡鐪嬪揩鐓ф垨 AMI 鐨勫姞瀵嗕俊鎭€?/p> 瑙ｅ喅鏂规
澶囨敞锛?/b>
濡傛灉鍦ㄨ繍琛?AWS CLI 鍛戒护鏃舵敹鍒伴敊璇紝璇风‘淇濇偍浣跨敤鐨勬槸鏈€鏂扮増鏈殑 AWS CLI銆?/li> 榛樿鐨?AWS CLI 杈撳嚭涓?JSON銆傛偍鍙互浣跨敤榛樿鍊硷紝涔熷彲浠ュ皢--output json闄勫姞鍒板懡浠や互鎺ユ敹杈撳嚭锛屽浠ヤ笅绀轰緥鎵€绀恒€傛湁鍏宠缁嗕俊鎭紝璇峰弬闃?a href="https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-output.html#cli-usage-output-filter" target="_blank">How to filter the output with the --query option锛堝浣曚娇鐢?鈥?鏌ヨ閫夐」绛涢€夎緭鍑猴級銆?/li> 浣跨敤 AWS CLI 鍛戒护鏌ョ湅鍔犲瘑淇℃伅1. 浣跨敤BlockDeviceMappings鏌ヨ绛涢€夋潯浠惰繍琛?b>describe-images鍛戒护锛屼互鏌ョ湅涓?AMI 鍏宠仈鐨勫揩鐓с€傚湪浠ヤ笅绀轰緥涓紝灏?b>image-ids鍜?b>鍖哄煙鏇挎崲涓?AMI 鐨?ID 鍜屽尯鍩熴€?/p>
# aws ec2 describe-images --image-ids ami-xxxxxxxxx --region eu-west-1 --query "Images.BlockDeviceMappings"
]鍓嶉潰鐨勫懡浠よ緭鍑虹ず渚嬫樉绀虹殑鏄笌 AMI 鍏宠仈鐨勫揩鐓у皢鍔?b>Encrypted锛堝凡鍔犲瘑锛夊弬鏁拌缃负true锛堟槸锛夈€?/p>
2.浣跨敤describe-images鍛戒护鐨勮緭鍑轰腑鍒楀嚭鐨勫揩鐓х殑snapshot-id杩愯describe-snapshots鍛戒护锛?/p>
# aws ec2 describe-snapshots --snapshot-ids snap-xxxxxxxxx --region eu-west-1
{
"Snapshots":
}璁颁笅鍛戒护杈撳嚭涓殑KMSKeyId銆?/p>
3.杩愯describe-key鍛戒护锛屼互纭畾璇ュ瘑閽ユ槸 AWS 鎵樼鐨?CMK 杩樻槸鐢ㄦ埛绠＄悊鐨?CMK銆傚湪浠ヤ笅鍛戒护涓紝灏?b>key-id鏇挎崲涓?b>describe-snapshot鍛戒护涓垪鍑虹殑KMSKeyid 銆傚皢鍖哄煙鏇挎崲涓哄揩鐓х殑鍖哄煙銆?/p>
# aws kms describe-key --key-id dcd4d062-xxxxxxxxx-xxxxxxxxx --region eu-west-1
{
"KeyMetadata": {
"AWSAccountId": "92xxxxxxxxx",
"KeyId": "dcd4d062-xxxxxxxxx-xxxxxxxx",
"Arn": "arn:aws:kms:eu-west-1:92xxxxxxxxx:key/dcd4d062-xxxxxxxxx-xxxxxxx",
"CreationDate": 1579611763.538,
"Enabled": true,
"Description": "02-example-CMK",
"KeyUsage": "ENCRYPT_DECRYPT",
"KeyState": "Enabled",
"Origin": "AWS_KMS",
"KeyManager": "CUSTOMER",
"CustomerMasterKeySpec": "SYMMETRIC_DEFAULT",
"EncryptionAlgorithms":
}
}鍦ㄥ墠闈㈢殑杈撳嚭绀轰緥涓紝鈥淜eyManager鈥?鍙傛暟涓?b>鈥淐ustomer鈥?/b>锛岃〃绀哄瘑閽ヤ负鐢ㄦ埛绠＄悊鐨?CMK銆傚浜?AWS 鎵樼瀵嗛挜锛?b>鈥淜eyManager鈥?/b>鍙傛暟涓?b>鈥淎WS鈥濄€?/p> 浣跨敤鎺у埗鍙版煡鐪嬪姞瀵嗕俊鎭?/h3>
1.鎵撳紑Amazon EC2 console锛圓mazon EC2 鎺у埗鍙帮級锛岀劧鍚庨€夋嫨 AMI銆?/p>
2.澶嶅埗鎮ㄩ渶瑕佸叾璇︾粏淇℃伅鐨?AMI 鐨?ID銆?/p>
3.鍦?b>Elastic Block Store锛堝脊鎬ф暟鎹簱瀛樺偍锛夐」涓嬶紝閫夋嫨Snapshots锛堝揩鐓э級銆?/p>
4.灏?AMI ID 绮樿创鍒版悳绱㈡涓紝鐒跺悗鎸?b>ENTER锛堝洖杞︼級閿€?/p>
5.閫夋嫨蹇収锛岀劧鍚庡湪Description锛堟弿杩帮級閫夐」鍗′笂锛岄獙璇?b>Encryption 锛堝姞瀵嗭級宸茶缃负Encrypted锛堝凡鍔犲瘑锛夎繕鏄?b>Not Encrypted锛堟湭鍔犲瘑锛夈€傚鏋滃揩鐓у凡鍔犲瘑锛岃璁颁笅KMS 瀵嗛挜 ID鍜?b>KMS 瀵嗛挜 ARN銆?/p>
6.鎵撳紑AWS Key Management Service (AWS KMS) 鎺у埗鍙?/a>銆?/p>
7.閫夋嫨AWS managed keys锛圓WS 鎵樼瀵嗛挜锛夛紝鐒跺悗灏?b>KMS Key ID锛圞MS 瀵嗛挜 ID锛夌矘璐村埌绛涢€夋潯浠舵涓€傚鏋滄湭鏄剧ず浠讳綍缁撴灉锛岃閫夋嫨Customer managed keys锛堢敤鎴风鐞嗙殑瀵嗛挜锛夛紝鐒跺悗灏?b>KMS Key ID锛圞MS 瀵嗛挜 ID锛夌矘璐村埌绛涢€夋潯浠舵涓€?
娉ㄦ剰锛?/b>鎮ㄦ棤娉曞叡浜娇鐢?AWS 鎵樼瀵嗛挜鍔犲瘑鐨?AMI銆傛湁鍏宠缁嗕俊鎭紝璇峰弬闃?a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-modifying-snapshot-permissions.html#share-snapshot-considerations" target="_blank">鍏变韩蹇収 鈥?娉ㄦ剰浜嬮」銆?/p>