Booj thoughts on security

Converting AWS AMI to OVF

This is a short post covering the steps to convert an AWS AMI to a VMDK.

I recently had an issue in extracting an AMI from AWS. In performing this form of conversion there are a number of steps that need to be taken to ensure that the

Firstly, follow the instructions at https://docs.aws.amazon.com/vm-import/latest/userguide/v in order to export a vmdk to an S3 bucket.

Important notes here are to make this S3 bucket accessible by the vmimport role, that this guide requires. In addition, ensure that (depending on the region) the account id’s detailed in this link are added to the S3 bucket with full permissions.

Once this is all complete, which may take a few hours, download the resultant vmdk.

Next, run the following command over the exported and downloaded vmdk:

C:\Program Files (x86)\VMware\VMware Workstation>vmware-vdiskmanager.exe -r C:/Users/booj/Downloads/export-ami-abcdef.vmdk -t 0 C:/Users/booj/Downloads/out.vmdk

Finally, mount the vmdk resultant from the above command as the primary boot volume of a VMWare Workstation VM. Ensure BIOS (not UEFI) is selected during the VM creation. Now simply export this VM.

comments powered by Disqus