Question: can ebs root volume be encrypted?
Answer: Your security team can enable encryption by default without having to coordinate with your development team, and with no other code or operational changes. Encrypted EBS volumes deliver the specified instance throughput, volume performance, and latency, at no extra charge.