Step 5. Specify Instance Type and Enable Encryption

[This step applies only if you have selected the Restore to a new location, or with different settings option at the Restore Mode step of the wizard]

At the Instance Type step of the wizard, you can change the instance type and encryption settings for the restored EC2 instance. To do that, select the necessary EC2 instance from the list and do the following:

  1. Click Type and select the instance type in the Instance Type window.

For the list of all existing EC2 instance types, see AWS Documentation.

  1. Click Encryption, and in the Disk encryption window:
  • Select the Preserve the original encryption settings option if you do not want to encrypt the EBS volumes or want to apply the original encryption scheme of the source EC2 instance.


The Preserve the original encryption settings option is disabled if the AWS KMS key used to encrypt EBS volume of the source instance is not available in the region to which the EC2 instance will be restored.

  • Select the Use the following encryption key option if you want to encrypt the restored EBS volumes of the processed EC2 instance with AWS KMS keys. Then, choose the necessary KMS key from the list.

For a KMS key to be displayed in the list of available encryption keys, it must be stored in the AWS Region selected at step 4 of the wizard and the IAM role specified for the restore operation must have permissions to the key. For more information on KMS keys, see AWS Documentation.

Restore to Amazon EC2 - Instance type and encryption