Ensure at-rest data encryption is enabled for AWS EBS Root Block cluster

AWS ECS clusters attached to EBS block not encrypted can impact the confidentiality of data at-rest.

At-rest encryption can be enabled on a replication group only when it is created. Because there is some processing needed to encrypt and decrypt the data, enabling at-rest encryption can have a performance impact during these operations. For more information on how to setup launch configurations, see the AWS documentation.

In Terraform -

1. In the aws_launch_configuration resource, set the ebs_block_device.encrypted field to true.
2. This will destroy existing launch configurations for autoscaling groups and deploy a new configuration. For more information, see the Terraform documentation.

References:
https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-asg-launch-configuration.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/launch_configuration