Michael, you're correct that this is just the same as SAN booting. It has the same fun implications that if your SAN goes down so do all your replicas of a distributed service. SAN aficionados would claim that "the" SAN really is composed of multiple failure-independent parts. AWS says that EBS consists of many independent parts. We now try to sort all this out :-).