From 723928409c82d3e390dd871d5cf013f6f04aa99f Mon Sep 17 00:00:00 2001 From: hc-github-team-secure-boundary <82989682+hc-github-team-secure-boundary@users.noreply.github.com> Date: Tue, 3 Mar 2026 01:17:34 +0530 Subject: [PATCH] backport of commit 0758183b35ee628cca9dbb14f8cf73af3ada82aa (#6455) Co-authored-by: Michael Li --- enos/modules/aws_vault/vault-instances.tf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/enos/modules/aws_vault/vault-instances.tf b/enos/modules/aws_vault/vault-instances.tf index 8ed35ce60a..0894768823 100644 --- a/enos/modules/aws_vault/vault-instances.tf +++ b/enos/modules/aws_vault/vault-instances.tf @@ -18,6 +18,10 @@ resource "aws_instance" "vault_instance" { }, ) + root_block_device { + encrypted = true + } + metadata_options { http_endpoint = "enabled" http_tokens = "required"