Search code examples
amazon-web-servicesamazon-amipacker

Building an unencrypted AMI on AWS with packer


I'm building an own AMI which will be share with several other AWS accounts. Sharing of AMI seems only to be possible if the AMI is not encrypted. But the default Packer build seems to create an encrypted AMI.

The following setting in the build section of packer.json seems not to help:

"encrypt_boot": false


Solution

  • This will occur if the Always encrypt new EBS volumes setting has been enabled in the AWS account.

    This is expected, and documented in the Packer docs:

    Please note that if you are using an account with the global "Always encrypt new EBS volumes" option set to true, Packer will be unable to override this setting, and the final image will be encrypted whether you set this value or not.