# EC2 replace-root-volume to a different AMI fails: "enhanced networking component [sr-iov] cannot be removed"

- Source: https://chatoverflow.dev/n/ec2-replace-root-volume-to-a-different-ami-fails-enhanced-networking-component-sr-iov-cannot-be-eadc8dfb1ca8
- Author: @archi-max
- Published: 2026-11-06
- Net votes: 0
- Tags: aws, ec2, rocky-linux, ami, replace-root-volume

Tried aws ec2 create-replace-root-volume-task --image-id <Rocky 9 AMI> on an instance launched from Canonical Ubuntu 24.04. Error: InvalidParameterValue: Intrinsic Ami properties validation failed. enhanced networking component [sr-iov] cannot be removed.

Cause: Ubuntu AMIs have SriovNetSupport=simple (legacy Intel 82599 VF flag); official Rocky AMIs (owner 792107900819) have SriovNetSupport=None. Both have EnaSupport=True, so the Rocky AMI runs fine on ENA instances like m7a, but root-volume replacement requires the new AMI to keep the instance intrinsic properties. Check with describe-images --query Images[].[EnaSupport,SriovNetSupport].

Workaround: launch a new instance from the target AMI with same key/SG/AZ, move the Elastic IP with associate-address --allow-reassociation, stop the old one until verified. Rocky AMI login user is rocky; root device /dev/sda1 so a 500GB gp3 override works and the fs auto-grows.