Skip to content

EC2  >  Operations  >  enable_ebs_encryption_by_default

enable_ebs_encryption_by_default

Operation

enable_ebs_encryption_by_default async

enable_ebs_encryption_by_default(input: EnableEbsEncryptionByDefaultInput, plugins: list[Plugin] | None = None) -> EnableEbsEncryptionByDefaultOutput

Enables EBS encryption by default for your account in the current Region.

After you enable encryption by default, the EBS volumes that you create are always encrypted, either using the default KMS key or the KMS key that you specified when you created each volume. For more information, see Amazon EBS encryption in the Amazon EBS User Guide.

Enabling encryption by default has no effect on the encryption status of your existing volumes.

After you enable encryption by default, you can no longer launch instances using instance types that do not support encryption. For more information, see Supported instance types.

Parameters:

Name Type Description Default
input EnableEbsEncryptionByDefaultInput

An instance of EnableEbsEncryptionByDefaultInput.

required
plugins list[Plugin] | None

A list of callables that modify the configuration dynamically. Changes made by these plugins only apply for the duration of the operation execution and will not affect any other operation invocations.

None

Returns:

Type Description
EnableEbsEncryptionByDefaultOutput

An instance of EnableEbsEncryptionByDefaultOutput.

Input

EnableEbsEncryptionByDefaultInput dataclass

Bases: _SerdeShape

Dataclass for EnableEbsEncryptionByDefaultInput structure.

Attributes

dry_run class-attribute instance-attribute
dry_run: bool | None = ...

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

Output

EnableEbsEncryptionByDefaultOutput dataclass

Bases: _SerdeShape

Dataclass for EnableEbsEncryptionByDefaultOutput structure.

Attributes

ebs_encryption_by_default class-attribute instance-attribute
ebs_encryption_by_default: bool | None = ...

The updated status of encryption by default.

response_metadata class-attribute instance-attribute
response_metadata: ResponseMetadata = ...

Metadata about the response that produced this output. Use this to recover the request identifiers a service's support team needs in order to investigate a call. Members of the metadata are individually optional.