Allow encryption to be enabled for root EBS volume

[tobyclemson]

[jeroenhabets]

@tobyclemson I checked our ECS EC2's launched from this module all have encryption at rest enabled on their root volume. Am I missing something?

[tobyclemson]

Hi @jeroenhabets,

Hmm, that's strange, according to https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/launch_configuration#root_block_device the default for encrypted is false and this module doesn't currently override that or allow it to be overridden by the module consumer.

Could it be possible you have this enabled: https://aws.amazon.com/premiumsupport/knowledge-center/ebs-automatic-encryption/ and that's causing the volumes to be encrypted?

Thanks, Toby

[jeroenhabets]

Hi @tobyclemson, of course. Apologies for taking your time for something I should have realized myself. For a moment, I thought I had found an old open issue that in the meantime had been solved. Perhaps the only good this may bring is that people finding this ticket now can learn of this alternative solution, by setting the default, you mentioned. Thanks! Jeroen

[tobyclemson]

@jonassvalin does your recent release resolve this issue?

[jonassvalin]

This is indeed fixed in release 6.0.0.