More
AWS Foundational Security Best Practice
EBS default encryption should be enabled
This control checks whether Amazon Elastic Block Store (EBS) encryption is enabled by default. The control fails if EBS default encryption is not enabled.