How to Take Snapshot of EC2 Instance for AWS EC2 Data Protection

If you’re using Amazon Web Services (AWS) to run EC2 instances (VMs) in Elastic Compute Cloud, you have several ways to protect your workloads against data loss caused by software failure, malware infection, accidental deletions, among other things. One option available to you is the AWS built-in backup feature for EC2 instances called EBS snapshots. This blog post explains how to create a snapshot of an EC2 instance by using EBS volume snapshots with detailed examples of the configuration process.

NAKIVO for AWS EC2 Backup

NAKIVO for AWS EC2 Backup

Backup of Amazon EC2 instances to EC2, AWS S3 and onsite. Anti-ransomware options. Fast recovery of instances and application objects.

What Are EBS Snapshots?

EBS snapshots are incremental copies of an Elastic Block Store (EBS) volume that are stored in Amazon S3. This means that when you create an EBS snapshot for the first time, a full backup is created, and only changed data is copied for the subsequent EBS snapshots. EBS volumes are virtual disks attached to EC2 instances.

Even though EBS snapshots are stored in Amazon S3, you cannot access the snapshots in S3 storage manually. You can manage these snapshots in the EC2 Management Console.

Note: The terms AWS EC2 snapshot and Amazon snapshot are sometimes also used to refer to EBS snapshots.

How EBS snapshots work

EBS snapshots are block-level backups of EC2 instance data that represent the EBS volume at the specific point in time when the snapshot command was issued. This means that if the instance is running, the data blocks written to EBS volumes after the initiation of the snapshot-taking are not saved to the snapshot. As a result, EBS snapshots are crash-consistent and not application-consistent backups.

Note that EBS snapshots are not the same as snapshots in the context of VMware vSphere and Microsoft Hyper-V. Hyper-V and VMware snapshots are not backups and cannot replace proper backups.

However, there are limitations to EBS snapshots, which include lack of scheduling and retention options, no possibility to create on-premises copies, as well as the complexity of creating an application-consistent EC2 snapshot to simplify recovery.

How to Create Snapshot in AWS Console for EC2 Instances

AWS Management Console is the GUI web interface used to manage all AWS computing, storage, and other resources, including creating EBS snapshots.

To access the EC2 instance for which you want to create a snapshot:

  1. Sign in to AWS Management Console by using an account that has the required permissions for creating EC2 instances, EBS volumes, and EBS snapshots.
  2. Click Services and in the Compute section, click EC2 to open the management console for EC2 instances, EBS volumes, and other EC2 features.

Using AWS Management Console to create snapshot of EC2 instance (EBS snapshot)

We have prepared an EC2 instance to demonstrate the steps to create EBS snapshots. The parameters of our EC2 instance, which we are going to back up and recover using EBS snapshots, are the following:

Name: blog-temp

EC2 instance ID: i-0071290000000cb84

Instance type: t2.micro

Availability zone: eu-central-1c

EBS Volume 1: vol-0617000000000763c

Volume type: gp2

Volume size: 8 GB

The guest operating system (OS) running on the EC2 instance is Ubuntu Server (Linux).

Writing files to the EBS volume

Let’s create two files on the virtual disk attached to the EC2 instance before creating a snapshot. This way, we can check whether these files are recovered after restoring the instance from the EBS snapshot. We create two files in the user home directory:

lspci > file01.txt

echo "test EC2 snapshot 01" > snapshot01.txt

Creating files on an instance before taking snapshot of EC2 instance

Preparing the instance

Stop the EC2 instance to make sure that the snapshot contains consistent data. The reason for this is that EBS volumes work at the block level. When an EBS snapshot is taken, the EBS volume state for that moment in time is saved. Storage blocks are saved as is. The system is not aware of operations made with files at the file system level at that time. If files are being written on an EBS volume when a snapshot is taken, the snapshot will contain inconsistent data. The effect is similar to unplugging a power cable from a physical computer while files are being written.

If you want to take a snapshot of a non-system EBS volume, you can unmount the file system from the operating system to ensure that there are no file-writing operations on the volume. Hibernation must be disabled for the EC2 instance to take a snapshot.

To prepare your EC2 instance for taking a snapshot:

  1. Open the page with the list of EC2 instances in the EC2 management console. Right-click the instance name and, in the context menu, click Stop instance.

Stopping the EC2 instance before creating a new snapshot in AWS

  1. Locate the volume used by the EC2 instance. Click the Storage tab and click the volume ID of the appropriate EBS volume (vol-0617000000000763c in our case).

Selecting the EBS volume attached to the EC2 instance to create snapshot of EC2 instance

Taking a snapshot

We are ready to create snapshot of EC2 instance:

  1. Select the EBS volume (click the checkbox on the left side of the line) and click Actions > Create Snapshot.

Selecting the Create Snapshot option in the Actions menu

  1. Enter a description, set the encryption settings, and add a tag. I use the following parameters:
  • Description: EBS snapshot blog 01
  • Encryption: Not encrypted

Click Create Snapshot.

Note: We use the unencrypted volume and create an unencrypted snapshot. In this case, encryption settings for the snapshot can be set manually. When you take a snapshot of an encrypted volume, the snapshot is encrypted automatically.

Setting description, encryption, and tags in the Create Snapshot window

  1. You should see the following message and the snapshot ID:

Create Snapshot Request Succeeded

Click the snapshot ID to open a page with the snapshot options and status.

EC2 Create snapshot request succeeded

  1. The pending snapshot status means that data from the EBS volume is being transferred now to Amazon S3. Wait for snapshot creation to be completed (the status is changed to completed). The time depends on the size of data saved to the snapshot.

The create ebs snapshot process is in progress

How to Take Multi-Volume Snapshots

It is common to find an EC2 instance using multiple EBS volumes. In this case, you can create a multi-volume snapshot for all EBS volumes attached to that EC2 instance for an Amazon EC2 backup.

In this section, we’ll cover:

Creating a second EBS volume for the EC2 instance

Let’s first add a second EBS volume to our EC2 instance, which we are using for demonstration purposes:

  1. In the navigation pane of the EC2 management console, go to Elastic Block Store > Volumes. Click Create Volume.

Adding a volume for steps on how to take snapshots in aws of multiple EBS volumes

  1. For Availability Zone, the region must be the same as the region of the instance (eu-central-1c in our case).

Enter the volume type/size, set the encryption options, and enter tags. Tags help find the volume in the list of volumes. We set the volume size at 1 GiB, and use the following tags:

  • Key: blog

  • Value: temp volume 2

Click Create Volume.

Options to create an EBS volume

  1. Remember (or write down) the id of the volume (vol-0b4a0000000003d01 in our case). Click the volume ID to open the volume properties.

The ebs volume has been created

  1. Attach the volume to the EC2 instance. Right-click the volume or click Actions and, in the menu that opens, click Attach Volume.

Attaching the EBS volume to the EC2 instance

  1. Select the instance to which you need to attach the EBS volume. You must select the EC2 instance ID. In our case, the instance ID is i-0071290000000cb84.

You can select the device in the guest operating system used to access the attached volume. In our case /dev/sdf is used.

Click Attach to attach the new volume to the EC2 instance.

Note: Useful information about renaming disk devices is displayed in the note. In our case /dev/sdf is renamed to /def/xvdf in the guest OS.
Options to attach the EBS volume to the EC2 instance

Two volumes are now attached to our EC2 instance (blog-temp):



Two EBS volumes are attached to instance to create snapshot of EC2 instance

Writing data on the second EBS volume

Next, we will create a file on the second EBS volume. This file will be used to check whether all the data is recovered after restoring the volume from the EBS snapshot. For this reason, we will create a partition, create a file system, and mount the file system to the guest Linux OS running on the EC2 instance.

Even though we are focused on operations with EBS snapshots rather than operations in the guest Linux OS running on the EC2 instance, we list the commands used to better understand operations with volumes.

Managing storage

  • Use lsblk to display details about block devices in Linux.
  • Use df -h to check storage space on mounted disks.
  • Use mount to check mounted disks.

Creating and mounting a partition

Creating and formatting a partition on the second EBS volume in parted:

sudo parted -l

parted /dev/xvdf

(parted) mklabel msdos

(parted) print

(parted) mkpart primary ext4 1MB 955MB

(parted) print

(parted) quit

Creating a file system on the prepared partition:

mkfs.ext4 /dev/xvdf1

Creating the directory to use as the mount point:

mkdir disk2

Mounting the partition with the file system to the created directory:

mount /dev/xvdf1 /disk2/

Going to the directory of the mounted partition:

cd /disk2

Writing changes to the 2 EBS volumes

  1. Create the file on the partition located on the second EBS volume attached to the EC2 instance running Linux:

echo “EBS snapshot for disk 2” > /disk2/d2-file01.txt

Creating a file to be restored on the EBS volume by using a snapshot in AWS

  1. Make changes on the first disk to create a new EBS snapshot of the first volume used by the EC2 instance. Both volumes should contain changes from the state when the previous snapshot was taken.

We create the snapshot02.txt file on the first volume to more conveniently detect changes saved to the new snapshot of the first volume.

Adding a file to the home directory stored on the first EBS volume

Once the two EBS volumes with new data are attached to the EC2 instance, we can create multi-volume snapshots.

Creating the multi-volume snapshot

  1. Go to Elastic Block Store > Snapshots in the navigation pane of the EC2 instances management page. Click Create Snapshot.

Clicking the Create Snapshot button in the Amazon web interface to take EC2 snapshots in AWS

  1. Select resource type: Instance.
  2. Enter the instance ID of the needed EC2 instance whose volumes you want to back up by using EBS snapshots.

All volumes attached to the selected instance are selected automatically.

  1. Enter a description to help you find the EBS snapshot in AWS when needed. In our example, the description is EBS snapshot blog 02.
  2. Select the Copy tags from volume checkbox if you want to use the tags assigned to EBS volumes.
  3. Once hit Create Snapshot, snapshots for all selected volumes are created.

How to take snapshot in AWS for multiple EBS volumes

If the process is successful, you’ll see the following message:

Create Snapshot Request Succeeded

Two Amazon snapshot identifiers are displayed: snap-0f95000000000de71 and snap0a91000000000769b in our case.

You can save these ID values and click one of them to check the snapshot creation status. Right after initiating the snapshot creation, the operation status is pending and changes to completed once the process is over.

The EC2 create snapshot operation is started for multiple EBS volumes

A new snapshot for each volume has been created.

Using AWS CLI to Create Snapshots

You can use AWS CLI as an alternative to AWS Management Console if you prefer the command-line interface or you need to automate snapshot creation.

The command to create an EBS snapshot in AWS CLI is:

aws ec2 create-snapshot --volume-id vol-0b4a51e1cea333d01 --description "This is a test snapshot for the blog"

The output should look like this:


    "Description": "This is a test snapshot for the blog",

    "Tags": [],

    "Encrypted": false,

    "VolumeId": "vol-0b4a51e1cea333d01",

    "State": "pending",

    "VolumeSize": 8,

    "StartTime": "2021-08-28T21:06:01.000Z",

    "Progress": "",

    "OwnerId": "012345678910",

    "SnapshotId": "snap-0689749a39a7b822b"


The command to create a snapshot with tags:

aws ec2 create-snapshot --volume-id vol-0b4a51e1cea333d01 --description 'Prod backup' --tag-specifications


How to Restore an EC2 Instance Using EBS Snapshots

We have created snapshots of the EBS volumes attached to the Amazon EC2 instance. These snapshots are a form of data backup in AWS. Now let’s find out how to create EC2 instance from snapshot by restoring:

  • particular EBS volumes in AWS
  • the entire EC2 instance

Restoring the second EBS volume

Let’s restore the second EBS volume (size is 1 GiB) from the snapshot. This volume is used to store files, and the operating system is not installed on this volume.

  1. In the navigation pane of the EC2 management console, go to Elastic Block Store > Snapshots.

We enter “blog” in the search field to display all snapshots created for EBS volumes of the EC2 instance used for writing this blog post. This is an example of why it’s worth adding descriptions and tags.

  1. Select the snapshot of the 1-GiB volume and create a new volume from the snapshot. Right-click the snapshot and, in the menu that opens, hit Create Volume.

how to create EC2 instance from snapshot in AWS

  1. Define the needed volume parameters on the Create Volume page: select the volume type and define the volume size, availability zone, encryption options, tags keys, and values.

The availability zone must be the same as that of the EC2 instance (eu-central-1c in our case).

The volume size is the same as the size of the original backed-up volume (1 GiB) in our example.

The tag key is blog and the value is recovered volume 1.

  1. Hit Create Volume to finish and create the EBS volume using the EBS snapshot.

recovering the EBS volume to create EC2 instance from snapshot

You will see the following message:

Create Volume Request Succeeded

You can save the volume ID. The new volume id is vol-09cd000000000b502 in our case.

successful recovery of the volume from the ebs snapshot

Restoring a system volume

To restore an EC2 instance, you need to restore the EBS volume on which the operating system is installed. In this case, you can create an image from the snapshot of the EBS volume used by the guest operating system and launch the instance by using this image (the restored EC2 instance).

Creating the image

  1. In the EC2 management console, go to Elastic Block Store > Snapshots and select the snapshot needed of the EBS volume on which the guest OS is installed.

We select the latest snapshot of the 8-GiB volume used by the guest OS (Ubuntu Server). This EBS volume snapshot was created when we created the multi-volume snapshot for the EC2 instance.

Right-click the snapshot and, in the menu that opens, hit Create Image.

How to create EC2 instance from snapshot – creating an image

  1. In the window that opens, enter the information needed and select the options to create an image from the EBS snapshot. We use the following parameters.

Name: blog-recovered

Description: Restored from an EBS snapshot (blog)

Other settings are left at their defaults.

Hit Create.

How to create EC2 instance from snapshot by using AMI

  1. The Create Image request received dialog box opens. Click the image ID to view information about the image (ami-08ed800000000872a in our case). Wait until image creation is completed.

creating the image from the ec2 snapshot

Launching the image

Once the image has been created, right-click the image and hit Launch.

Launching the AMI to create EC2 instance from snapshot

The new EC2 instance creation wizard opens. You must select the instance options. You can select the options that are the same as the options selected for the original VM that was backed up. You can also restore the instance to a new more powerful EC2 instance.

Note: We are redirected to Step 2 of the wizard (instead of Step 1. Choose AMI) as we have already selected the blog-recovered AMI from the page with the list of AMIs.

Step 2: Choose an Instance Type. We select t2.micro as the instance type. Click Next at each step of the wizard to continue.

restoring the EC2 instance from ec2 snapshots

Step 3: Configure Instance. Configure the details depending on your requirements, including network settings, IAM roles, shutdown behavior, etc.

Step 4: Add Storage is important when you recover an EC2 instance by using EBS snapshots. Click Add New Volume. A new line with volume options is added on this page. Enter the ID of the needed volume snapshot in the Snapshot field.

We enter snap-0a91000000000769b, which is the ID of our snapshot of the 1-GiB volume. The 8-GiB size of the volume is selected by default in our example. We can set the volume size to 1 GiB as configured for the original EBS volume. You can also select the storage device, volume type, encryption, and delete on termination options.

Attaching the EBS volume recovered from the AWS snapshot to the EC2 instance

Step 5: Add Tags. Make sure the tags useful for search purposes. Tags are applied to all volumes and instances. In this example, the tag key is blog and the value is recovered VM 01.

adding tags to a recovered EC2 instance

Step 6: Configure Security Group. Edit the parameters to control the network traffic for your EC2 instance.

Step 7: Review Instance Launch. Review your instance launch details and hit Launch to finish. You must select a key pair or create a new one to access the EC2 instance.

  1. The Launch Status page is now displayed. Click View instances.

launching ec2 instance from an EBS volume snapshot

  1. Enter a name for the recovered instance (blog-recovered in our case). The status of the recovered E2 instance is running. Both EBS volumes recovered from the EBS snapshots are attached to the EC2 instance (see the screenshot below).

the EC2 instance has been restored from ebs snapshots

Checking the restored files

Let’s check whether the files created before taking the latest snapshot have been recovered:

List the attached block devices:


List the files of the current (home) directory of the user:

ls -al

The snapshot01.txt and snapshot2.txt files created before taking the first and second snapshots of the EBS volume on which the OS is installed are present.

Mount the partition located on the second disk (EBS volume):

sudo mount /dev/xvdb1 /disk2/

The partition name has been changed to /dev/xvdb1. Keep in mind that you may need to edit /etc/fstab after restoring the instance for auto-mounting.

ls -al /disk2/

d2-file01.txt is present on the file system stored on the second EBS volume after restoring.

snapshots of ec2 instance were used to restore EBS volumes with files stored on them

The AWS EC2 instance, with all attached EBS volumes, has been successfully restored from EBS snapshots. All needed data is preserved.


You can back up a single volume or back up all volumes by using multi-volume snapshots. This is a very handy native AWS functionality for data protection and disaster recovery. Note, however, that additional costs are incurred when storing EBS snapshots in the Amazon cloud because additional cloud storage is used. In addition, there are other limitations to using EBS snapshots for backups, such as the snapshot creation system not being aware of files being written at the moment the snapshot is taken. As a result, backups made with EBS snapshots are crash-consistent and not application-consistent.

NAKIVO Backup & Replication is a data protection solution that supports the creation of application-aware backups and replicas of Amazon EC2 instances. You can also use the solution to significantly simplify and automate the backup and recovery process. Swiftly recover the entire EC2 instance from a backup without the need to recover EBS volumes, create an EC2 instance, and attach the volumes manually to a created EC2 instance.

1 Year of Free Data Protection: NAKIVO Backup & Replication

1 Year of Free Data Protection: NAKIVO Backup & Replication

Deploy in 2 minutes and protect virtual, cloud, physical and SaaS data. Backup, replication, instant recovery options.

People also read