How to encrypt an existing (unencrypted) EC2 EBS volume
If you find yourself in the position where you need to convert a running, unencrypted instance into an encrypted one, you must take careful, defined steps to meet security standards and prevent data loss or corruption.
This video describes each step to protect your storage volumes. The entire procedure can be completed in under 15 minutes by closely following this guide.
Overview of Procedure:
Locate the EC2 and EBS instances
Create a snapshot of the EBS volume
Copy snapshot (unencrypted) to an encrypted copy
Create an EBS volume from the encrypted snapshot
Stop the EC2 instance
Detach existing volume
Attach the new volume
Restart the EC2 instance
Additional considerations
Reference Document : https://bit.ly/3TguT2Z
