Resolve EBS encryption errors during instance launch in Ocean

Title

When launching instances in Flexera Ocean on AWS, you may see an error indicating that an Amazon EBS volume cannot be encrypted. This error occurs when Ocean attempts to create or attach an encrypted EBS volume, but the required permissions are missing on the AWS Key Management Service [KMS] key.

This issue is most common when you use customer‑managed KMS keys to encrypt EBS volumes.

Solution

Symptoms

Instance launches fail with an error similar to the following:

Instance launch failed because an EBS volume cannot be encrypted.
If your launch specification includes an encrypted EBS volume, you must grant the AWSServiceRoleForEC2Spot service‑linked role access to any custom KMS keys.

Cause

The AWS service‑linked role AWSServiceRoleForEC2Spot does not have permission to use the KMS key configured for EBS encryption. Without these permissions, AWS cannot encrypt the volume during instance launch, and the request fails.

Solution

Grant the required permissions to the KMS key used for EBS encryption.

Choose the option that matches how your KMS key is configured.

Configure a KMS key in the same AWS account

If the KMS key exists in the same AWS account, update the key policy to allow access from the EC2 Spot service‑linked role.

See Create an encryption key for step‑by‑step guidance.
Configure a cross‑account KMS key

If the KMS key is owned by a different AWS account, configure cross‑account access so the EC2 Spot service‑linked role can use the key.

See Use a cross‑account KMS key to encrypt EBS volumes for detailed instructions.

Outcome

After updating the KMS key permissions, Ocean can successfully launch instances with encrypted EBS volumes. The instance launch errors no longer occur, and encrypted storage works as expected.

Was this helpful?

Support Hub

Product

Elastigroup

Visibility

Guest

URL Name

Resolve-EBS-encryption-errors-during-instance-launch-in-Ocean

Are you sure you want to cancel the case creation?

Case closed successfully

Action performed successfully

Upload Attachment

Maximum file size allowed is 3 MB.

File type not supported.

Supported file types:

Documents (.txt, .doc, .docx, .pdf), Images (.jpg, .png), Comma Separated Files (.csv) Speadsheets (.xlsx, .xls)

Are you sure you want to close this case

Get Hotline support

Products	Region	Phone Numbers
FlexNet Operations FlexNet Embedded FlexNet Publisher FlexNet Connect FlexNet Code Insight InstallAnywhere InstallShield	North America *	+1 630-332-2513 (toll) +1 877-279-2853 (toll-free in North America)
	Europe *	+44 1925 944367 (toll) +44 800 047 8642 (toll-free in Europe)
	Japan *	+81 3-4540-5335 (select option 2)
	Australia *	+61 3 9895 2177 +61 1800 560 603 (toll-free in Australia)
Usage Intelligence (formerly Revulytics) Compliance Intelligence	Please use the Case Portal to submit your support ticket or reach out to your Revenera contact.

Revenera Assistant

Symptoms

Cause

Solution

Related Articles

Please wait...

Case id: 00001065