From 628bc9430a74904d95ca5fd441dd72bc631593e7 Mon Sep 17 00:00:00 2001
From: Michael Li <michael.li@hashicorp.com>
Date: Tue, 10 Mar 2026 17:11:25 -0400
Subject: [PATCH] chore(e2e): Encrypt rds storage and snapshots

---
 enos/modules/aws_boundary/rds.tf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/enos/modules/aws_boundary/rds.tf b/enos/modules/aws_boundary/rds.tf
index 1c0c81b910..5bb9507cba 100644
--- a/enos/modules/aws_boundary/rds.tf
+++ b/enos/modules/aws_boundary/rds.tf
@@ -15,6 +15,7 @@ resource "aws_db_instance" "boundary" {
   identifier          = "boundary-db-${random_string.cluster_id.result}"
   allocated_storage   = var.db_storage
   storage_type        = var.db_storage_type
+  storage_encrypted   = true
   iops                = var.db_storage_iops
   engine              = data.aws_rds_engine_version.default.engine
   engine_version      = data.aws_rds_engine_version.default.version