github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/aws/ec2/AVD-AWS-0027/CloudFormation.md (about) 1 2 Enable encryption using customer managed keys 3 4 ```yaml--- 5 Resources: 6 GoodExample: 7 Type: AWS::EC2::Volume 8 Properties: 9 Size: 100 10 Encrypted: true 11 KmsKeyId: "alias/volumeEncrypt" 12 DeletionPolicy: Snapshot 13 14 ``` 15 ```yaml--- 16 Resources: 17 GoodExample: 18 Type: AWS::EC2::Volume 19 Properties: 20 Size: 100 21 Encrypted: true 22 KmsKeyId: !ImportValue "MyStack:Key" 23 DeletionPolicy: Snapshot 24 25 ``` 26 27