Ensure data encryption is enabled for AWS X-Ray

Using customer managed keys will give administrators control over how data is encrypted to better meet compliance regulations, as well as allow for a more specific key rotation period. Using system-generated keys can sometimes lead to expired or exposed keys remaining in use, leading to insecure data. It is often recommended to use a customer managed key when the service is available.

In AWS Console -

1. Sign in to AWS Console and go to the X-Ray console.
2. Select Encryption.
3. Select Use a KMS key.
4. Select Manually enter a key ARN and enter a KMS Key ARN.
5. Select Apply.

In Terraform -

1. In the aws_xray_encryption_config resource, set the 'type' attribute to 'KMS'.

References:
https://docs.aws.amazon.com/xray/latest/devguide/xray-console-encryption.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/xray_encryption_config