github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/ec2/AVD-AWS-0131/CloudFormation.md (about)

     1  
     2  Turn on encryption for all block devices
     3  
     4  ```yaml---
     5  Resources:
     6    GoodExample:
     7      Type: AWS::EC2::Instance
     8      Properties:
     9        ImageId: "ami-79fd7eee"
    10        KeyName: "testkey"
    11        UserData: export SSM_PATH=/database/creds
    12        BlockDeviceMappings:
    13          - DeviceName: "/dev/sdm"
    14            Ebs:
    15              Encrypted: True
    16              VolumeType: "io1"
    17              Iops: "200"
    18              DeleteOnTermination: "false"
    19              VolumeSize: "20"
    20  
    21  
    22  ```
    23  
    24