How can I share an encrypted Amazon RDS DB snapshot with another account?

[@aymenbentanfous1105]

The sentence that I need from the whole video "Make sure to select the correct region" :)

[@Magicx87]

Great tutorial! Straight to the point

[@frannelk]

Very good, I found this on the AWS white papers too and this helped me to accomplish some task for my customer 👏🏻👍👍👍👍

[@FrogBrawler]

Great tutorial... just wondering. Why were things created so that it is not possible to share the default KMS? I'm sure there's some security related thing that I'm not currently grasping here.

[@liamray2010]

Nice tut! 10nx Chetan ; )

[@christinaliu2896]

Why you did not use the shared KMS when you create copy of shared snapshot? I pause the screen and see you use default key?

[@hoola_amigos]

Turns out you don't need to use the shared KMS key again when we copy the shared snapshot at the end. It works even with default KMS.

[@luke8818]

I think he forgot one step, the new account need to approve sharing invitation for the KMS key

[@Learner-hg4hj]

Wonderful catch

[@ChotaChef-em2fu]

I was wondering the same thing!

[@OmniCloudArchitect]

you forget to mention one important step, on target AWS account, you need to add IM policy to the user which do the copy snapshot operation, the policy is for you to get access to KMS in source account.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"kms:Describe*",
"kms:Enable*",
"kms:List*",
"kms:Put*",
"kms:Update*",
"kms:Revoke*",
"kms:Disable*",
"kms:Get*",
"kms:TagResource",
"kms:UntagResource"
],
"Resource": "arn:aws:kms:*:source_account_ID:key/KEY_ID"
}
]
}

[@awssupport]

We appreciate your feedback! 💭 I've gone ahead and shared this with our team internally for review. 🔍 ^RN

[@patrickding6506]

didn't you need to share the KMS to another account first?

[@shubhamsaini5725]

really helpful

[@cerguniko]

Thanks, It helps me

[@sreejithsoman5424]

Thanks , it helped.

[@seanyrobbo1]

Thank you

[@julianomoraisbarbosa]

#til