diff --git a/enos/modules/aws_boundary/boundary-instances.tf b/enos/modules/aws_boundary/boundary-instances.tf
index e074e60033..e345c74103 100644
--- a/enos/modules/aws_boundary/boundary-instances.tf
+++ b/enos/modules/aws_boundary/boundary-instances.tf
@@ -23,6 +23,7 @@ resource "aws_instance" "controller" {
     volume_type = var.controller_ebs_type
     throughput  = var.controller_ebs_throughput
     tags        = local.common_tags
+    encrypted   = true
   }
 
   tags = merge(local.common_tags,
@@ -50,6 +51,7 @@ resource "aws_instance" "worker" {
     volume_type = var.worker_ebs_type
     throughput  = var.worker_ebs_throughput
     tags        = local.common_tags
+    encrypted   = true
   }
 
   tags = merge(local.common_tags,
diff --git a/enos/modules/aws_worker/main.tf b/enos/modules/aws_worker/main.tf
index 0fd1c9e395..27910cc3c4 100644
--- a/enos/modules/aws_worker/main.tf
+++ b/enos/modules/aws_worker/main.tf
@@ -152,6 +152,7 @@ resource "aws_instance" "worker" {
     volume_type = var.ebs_type
     throughput  = var.ebs_throughput
     tags        = local.common_tags
+    encrypted   = true
   }
 
   tags = merge(