# About aws china ebs encryption

**URL:** <https://discuss.hashicorp.com/t/about-aws-china-ebs-encryption/33709>\
**Category:** Packer\
**Created:** [December 30, 2021, 8:20am UTC](https://discuss.hashicorp.com/t/about-aws-china-ebs-encryption/33709 "2021-12-30T08:20:00Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![wenyuan.dang](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/wenyuan.dang/32/24822_2.png) [@wenyuan.dang](https://discuss.hashicorp.com/u/wenyuan.dang)\
**Post date:** [December 30, 2021, 8:20am UTC](https://discuss.hashicorp.com/t/about-aws-china-ebs-encryption/33709/1 "2021-12-30T08:20:00Z")

</div>

if i use “arn:aws:kms:us-east-1:accountID:key/xxx-xxx-xxx” to encrypt AMI，packer validate command will returen sucess，but use “arn:aws-cn:kms:cn-north-1:accountID:key/xxx-xxx-xxx” it will be failed

---

<div class="post-metadata">

**Author:** ![tbugfinder](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/tbugfinder/32/12689_2.png) [@tbugfinder](https://discuss.hashicorp.com/u/tbugfinder)\
**Post date:** [December 30, 2021, 1:55pm UTC](https://discuss.hashicorp.com/t/about-aws-china-ebs-encryption/33709/2 "2021-12-30T13:55:17Z")

</div>

Hi,  
as per my understanding this is not support. AWS China isn’t supported by AWS KMS multi-region keys.

[https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html)
