From 994e6fce85b83b94ff785e6940ab11c8e098bf16 Mon Sep 17 00:00:00 2001
From: Michael Li <michael.li@hashicorp.com>
Date: Mon, 2 Mar 2026 14:36:45 -0500
Subject: [PATCH] chore(e2e): Encrypt file system on vault instance (#6452)

---
 enos/modules/aws_vault/vault-instances.tf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/enos/modules/aws_vault/vault-instances.tf b/enos/modules/aws_vault/vault-instances.tf
index 484e32bea4..774adeca61 100644
--- a/enos/modules/aws_vault/vault-instances.tf
+++ b/enos/modules/aws_vault/vault-instances.tf
@@ -18,6 +18,10 @@ resource "aws_instance" "vault_instance" {
     },
   )
 
+  root_block_device {
+    encrypted = true
+  }
+
   metadata_options {
     http_endpoint = "enabled"
     http_tokens   = "required"