EBS 3 Flashcards
1
Q
Sanitisation
What happens to the data on your EBS volume when you destroy your disk?
A
Nothing! Stays in-place on raw disks.
2
Q
Sanitisation
How does AWS prevent your raw data from being exposed to next EBS volume created?
A
AWS wipes disk blocks before providing to a new EBS volume.
3
Q
Sanitisation
How can you wipe your data before unallocating an EBS volume?
A
Manually from inside EC2, use EBS encryption.
4
Q
Sanitisation
Why does EBS encryption assure your data doesn’t exist after unallocate an EBS volume?
A
It doesn’t, but the DEK is only accessible from your account, so data is effectively wiped.
5
Q
Sanitisation
What happens to your data when AWS decommissions physical volumes?
A
AWS destroys data conforming to DoD and NIST guidelines.
