Ensure EBS Volumes are Encrypted at Rest with CMK
Elastic Block Store (EBS) volumes are directly connected to your compute instances. They are treated as data disks or operating system disks. Sensitive data may be housed on your EBS volumes and this is why it is a security best practice to ensure your data is encrypted at rest with a Customer Managed Key. This will also help you with NIST, HIPPA, GDPR & PCI-DSS compliance.