EBS default encryption should be enabled

Description

This rule evaluates whether encryption at the region level is enabled by default for Amazon Elastic Block Store (Amazon EBS).

Once enabled for a Region, encryption applies to all future volumes and snapshots within the region and cannot be disabled on an individual basis.

Remediation

To enable default encryption for Amazon EBS volumes, follow the steps outlined in the Encryption by default section of the Amazon EC2 User Guide.