---
title: "Not only encrypted EBS volumes are attached to EC2 instances"
canonical: "https://kb.cynergy.app/space/MD/1208352769/Not%20only%20encrypted%20EBS%20volumes%20are%20attached%20to%20EC2%20instances"
format: markdown
---
# Description

Encrypting your AWS EBS volumes adds a layer of security by restricting data access and preventing unauthorized modifications. This measure helps mitigate risks from external threats like hacking or malware and reduces potential internal risks, such as accidental or unauthorized access, ensuring only approved users can view and alter data.

# Fix - Build time

## Terraform

- **Resource:** aws_volume_attachment, aws_instance, aws_ebs_volume
- **Argument:** *volume_id* and *instance_id* of aws_volume_attachment

```
resource "aws_instance" "web" {
  ami               = "ami-1212"
  availability_zone = "us-west-2a"
  instance_type     = "t2.micro"

  tags = {
    Name = "HelloWorld"
  }
}

resource "aws_volume_attachment" "ok_attachment1" {
  device_name = "/dev/sdh3"
  volume_id   = aws_ebs_volume.ok_ebs2.id
  instance_id = aws_instance.web.id
}


resource "aws_ebs_volume" "ok_ebs2" {
  availability_zone = ""
  encrypted = true
}
```