feat: Enable root EBS volume encryption (#22)

#22
ordinaryexperts · May 16, 2023 · b5b3135 · b5b3135
1 parent 4def86a
commit b5b3135
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ec2.tf b/ec2.tf
@@ -65,6 +65,10 @@ resource "aws_launch_configuration" "this" {
 
   security_groups = [aws_security_group.this.id]
 
+  root_block_device {
+    encrypted = true
+  }
+
   user_data = templatefile("${path.module}/user_data.sh.tmpl", {
     aws_region  = local.region
     bucket_name = aws_s3_bucket.this.bucket