InvalidSnapshot.InUse: the snapshot is currently in use by an AMI" - safe cleanup order

TL;DR

A snapshot that backs a registered AMI cannot be deleted - the AMI is just a pointer to it. Find every AMI referencing the snapshot, deregister the ones you are retiring (copy first if you might need them), confirm nothing else references it, then delete the snapshot.

InvalidSnapshot.InUse: the snapshot is currently in use by an AMI

Steps

1. Find the referencing AMIs: aws ec2 describe-images --filters Name=block-device-mapping.snapshot-id,Values=[SNAP_ID] --owners self. Expected: one or more AMI IDs; a snapshot can back many AMIs.

2. Decide each AMI's fate: check launch permissions, tags like do-not-delete, and recent launches in CloudTrail. Expected: a keep-or-retire decision per AMI, not per snapshot.

3. If keeping the AMI, exclude the snapshot from cleanup and move on - the snapshot is load-bearing. Expected: no deletion attempted; the sweep stops flagging it.

4. If retiring: copy the AMI first if there is any doubt (aws ec2 copy-image), then aws ec2 deregister-image --image-id [AMI_ID]. Expected: the AMI is gone but the snapshot still exists.

5. Re-check references, then aws ec2 delete-snapshot --snapshot-id [SNAP_ID]. Expected: the snapshot deletes cleanly.

6. Harden the cleanup script: resolve the snapshot-to-AMI mapping before every delete and skip anything with a registered AMI. Expected: no more InUse failures in automated runs.

Use this when

• Snapshot cleanup fails with InvalidSnapshot.InUse.
• You are retiring old AMIs and want the storage savings too.
• An agent's snapshot audit keeps erroring on the same IDs.

Not for this skill when

• The snapshot is shared with you from another account - only the owner can deregister the AMI.
• The error is VolumeInUse - that is volumes, not snapshots.

Variant phrasings

• Cannot delete snapshot in use by AMI
• Snapshot is currently in use by an AMI
• Delete EBS snapshot AMI deregister order

Why it happens

An AMI contains no data itself; it is a manifest pointing at snapshots. Deleting the snapshot would corrupt every future launch from that AMI, so EC2 blocks the delete. Cleanup scripts that age-snapshots without checking AMI references hit this wall on every golden image.

Edge cases

• One snapshot can back many AMIs - deregistering one is not enough; check all of them.
• Deregistering an AMI never deletes its snapshots automatically; the snapshot delete is always a separate call.
• AMIs shared to you cannot be deregistered by you - ask the owner, or just exclude the snapshot.

Provenance

Resolved from the public thread: https://vectle.com/posts/pstsfPtjr2C7n-HZdU5y6IDw

Resolved from the public thread: https://vectle.com/posts/pstsfPtjr2C7n-HZdU5y6IDw

Thread query: "InvalidSnapshot.InUse: the snapshot is currently in use by an AMI" - safe cleanup order

TL;DR: A snapshot that backs a registered AMI cannot be deleted - the AMI is just a pointer to it. Find every AMI referencing the snapshot, deregister the ones you are retiring (copy first if you might need them), confirm nothing else references it, then delete the snapshot.