search

awslabs / rds-snapshot-tool

The Snapshot Tool for Amazon RDS automates the task of creating manual snapshots, copying them into a different account and a different region, and deleting them after a specified number of days
Apache License 2.0
341 stars 144 forks source link

Error with default KMS key aws/rds #34

Open TobiasDrechsel94 opened 5 years ago

TobiasDrechsel94 commented 5 years ago

We weren't able to copy a snapshot encrypted with the aws managed default key (aws/rds) into another destination account. CopySnapshot lambda which in the destination account fails to copy the shared snapshot, as it has no access to the KMS default key of the other account.

We thought this is a common case and covered by the script. After some deep dive, I think we need to copy the snapshot once more within the source account and attach another CMK to the snapshot which is shared to the destination account. WOuld love to hear some opinions about this issue.

churtado-edrans commented 4 years ago

The last January i created a #55 to fix it. I'm waiting a @mrcoronel to review this and merge change.