diff --git a/enos/modules/aws_target/main.tf b/enos/modules/aws_target/main.tf
index eaa6e85aa4..7bbb6d67b6 100644
--- a/enos/modules/aws_target/main.tf
+++ b/enos/modules/aws_target/main.tf
@@ -129,6 +129,10 @@ resource "aws_instance" "target" {
     "Environment" : var.environment
     "Enos User" : var.enos_user,
   })
+
+  root_block_device {
+    encrypted = true
+  }
 }
 
 resource "enos_remote_exec" "wait" {