This is an archive version of the document. Starting from version 11, the Veeam Backup for AWS User Guide is part of the Veeam Backup & Replication User Guide. To get the most up-to-date information, see the current version.Creating Cloud-Native Snapshots
The process of creating cloud-native snapshots of an EC2 instance with encrypted EBS volumes and an encrypted RDS instance does not differ from the same process for an instance with unencrypted volumes. The IAM role used to create cloud-native snapshots does not require any additional permissions — Veeam Backup for AWS encrypts these snapshots with the same KMS keys with which the source instance or volume is encrypted.