Blocks devices should be encrypted to ensure sensitive data is stored securely at rest.
resource "aws_launch_configuration" "my-launch-config" {
root_block_device {
encrypted = false
}
}
resource "aws_launch_configuration" "my-launch-config" {
root_block_device {
encrypted = true
}
}