The following table lists the operational outcomes for the EBS Direct Write process:
Operation |
Transport Mode |
Source Instance Volume Type |
Account Level Encryption Enabled? |
Outcome with Commvault |
---|---|---|---|---|
Restore within same region |
Direct Write |
Unencrypted volumes |
No |
Unencrypted snapshots. Unencrypted volumes |
Restore within same region |
Direct Write |
Volumes encrypted with AWS managed key |
No |
Snapshots encrypted with AWS managed key. Volumes encrypted with AWS managed key |
Restore within same region |
Direct Write |
Volumes encrypted with CMK |
No |
Snapshots encrypted with CMK. Volumes encrypted with CMK |
Restore within same region |
Direct Write |
Unencrypted volumes |
Yes |
Snapshots encrypted with account level default encryption key. Volume encrypted with account level default encryption key |
Restore within same region |
Direct Write |
Volumes encrypted with AWS managed key |
Yes |
Snapshots encrypted with AWS managed key. Volumes encrypted with AWS managed key |
Restore within same region |
Direct Write |
Volumes encrypted with CMK |
Yes |
Snapshots encrypted with CMK. Volumes encrypted with CMK |
Restore to different region |
Direct Write |
Unencrypted volumes |
No |
Unencrypted snapshots. Unencrypted volumes |
Restore to different region |
Direct Write |
Volumes encrypted with AWS managed key |
No |
Snapshots encrypted with AWS managed key of destination region. Volumes encrypted with AWS managed key of destination region. Note If account level default key is set, that key will be used even if Account Level Encryption is disabled. |
Restore to different region |
Direct Write |
Volumes encrypted with CMK |
No |
Snapshots encrypted with AWS managed key of destination region. Volumes encrypted with AWS managed key of destination region. If CMK is multi-region, then snapshot and volume are encrypted with the same CMK Note If account level default key is set, that key will be used even if Account Level Encryption is disabled. |
Restore to different region |
Direct Write |
Unencrypted volumes |
Yes |
Snapshot encrypted with account level default encryption key of destination region. volume encrypted with account level default encryption key of destination region |
Restore to different region |
Direct Write |
Volumes encrypted with AWS managed key |
Yes |
Snapshot encrypted with account level default encryption key of destination region. volume encrypted with account level default encryption key of destination region |
Restore to different region |
Direct Write |
Volumes encrypted with CMK |
Yes |
Snapshot encrypted with account level default encryption key of destination region. Volume encrypted with account level default encryption key of destination region. If CMK is multi-region, then snapshot and volume are encrypted with the same CMK |