Enable EC2 volume encryption by default

trailofbits · Jun 28, 2018 · 3abfa65 · 3abfa65
1 parent d58bd18
commit 3abfa65
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/config.cfg b/config.cfg
@@ -85,6 +85,7 @@ cloud_providers:
     size: s-1vcpu-1gb
     image: "ubuntu-18-04-x64"
   ec2:
+    encrypted: true
     size: t2.micro
     image:
       name: "ubuntu-bionic-18.04"

diff --git a/roles/cloud-ec2/defaults/main.yml b/roles/cloud-ec2/defaults/main.yml
@@ -1,6 +1,6 @@
 ---
 ami_search_encrypted: omit
-encrypted: false
+encrypted: "{{ cloud_providers.ec2.encrypted }}"
 ec2_vpc_nets:
   cidr_block: 172.16.0.0/16
   subnet_cidr: 172.16.254.0/23