Skip to main content

Remediation

To manage old EBS snapshots, you can either delete them or move them to a lower-cost archive tier. The following steps outline both options, as well as an automated solution using Amazon Data Lifecycle Manager (DLM).

Option 1: Deleting the Snapshot​

From Command Line​

aws ec2 delete-snapshot --snapshot-id {{snapshot-id}}

Option 2: Archiving the Snapshot​

From Command Line​

Use this option if the snapshot must be retained for compliance or audit purposes but does not require immediate access. Archiving significantly reduces storage costs.

aws ec2 modify-snapshot-tier \
    --snapshot-id {{snapshot-id}} \
    --storage-tier archive

Automated Remediation with Amazon Data Lifecycle Manager (DLM)​

For proactive management, consider Amazon Data Lifecycle Manager to automate snapshot creation, retention, archiving, and deletion.

From Command Line​

To create a default policy for EBS snapshots​

aws dlm create-lifecycle-policy \
    --state {{ENABLED | DISABLED}} \
    --description "{{policy-description}}" \
    --execution-role-arn {{role-arn}} \
    --default-policy VOLUME \
    --policy-details file://{{policy-details.json}}

Where {{policy-details.json}} includes the following:

{
    "PolicyLanguage": "SIMPLIFIED",
    "PolicyType": "EBS_SNAPSHOT_MANAGEMENT",
    "ResourceType": "VOLUME",
    "CopyTags": {{true|false}},
    "CreateInterval": {{creation-frequency-in-days}},
    "RetainInterval": {{retention-period-in-days}},
    "ExtendDeletion": {{true|false}}, 
    "CrossRegionCopyTargets": [{"TargetRegion":"{{destination-region-code}}"}],
    "Exclusions": {
        "ExcludeBootVolume": {{true|false}},
        "ExcludeVolumeTypes": ["{{standard|gp2|gp3|io1|io2|st1|sc1}}"],
        "ExcludeTags": [{ 
            "Key": "{{exclusion-tag-key}}",
            "Value": "{{exclusion-tag-value}}"
        }]
    }
}