# Encryption outcomes for EBS direct APIs
Encryption outcomes

When you start a new snapshot using [ StartSnapshot](https://docs.aws.amazon.com/ebs/latest/APIReference/API_StartSnapshot.html), the encryption status depends on the values that you specify for **Encrypted**, **KmsKeyArn**, and **ParentSnapshotId**, and whether your AWS account is enabled for [encryption by default](encryption-by-default.md).

**Note**  
You might need additional IAM permissions to use the EBS direct APIs with encryption. For moreinformation, see [Permissions to use AWS KMS keys](ebsapi-permissions.md#ebsapi-kms-permissions).
If Amazon EBS encryption by default is enabled on your AWS account, you can't create unencrypted snapshots.
If Amazon EBS encryption by default is enabled on your AWS account, you cannot start a new snapshot using an unencrypted parent snapshot. You must first encrypt the parent snapshot by copying it. For more information, see [Copy an Amazon EBS snapshot](ebs-copy-snapshot.md).

**Topics**
+ [

## Encryption outcomes: Unencrypted parent snapshot
](#ebs-direct-api-unencr-outcomes-parent)
+ [

## Encryption outcomes: Encrypted parent snapshot
](#ebs-direct-api-encr-outcomes-parent)
+ [

## Encryption outcomes: No parent snapshot
](#ebs-direct-api-encr-outcomes-noparent)

## Encryption outcomes: Unencrypted parent snapshot


The following table describes the encryption outcome for each possible combination of settings when specifying an unencrypted parent snapshot.

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ebs/latest/userguide/ebsapis-using-encryption.html)

## Encryption outcomes: Encrypted parent snapshot


The following table describes the encryption outcome for each possible combination of settings when specifying an encrypted parent snapshot.

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ebs/latest/userguide/ebsapis-using-encryption.html)

## Encryption outcomes: No parent snapshot


The following tables describe the encryption outcome for each possible combination of settings when not using a parent snapshot.

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ebs/latest/userguide/ebsapis-using-encryption.html)

\$1 This default KMS key could be a customer managed key or the default AWS managed KMS key for Amazon EBS encryption.