Description

The EBS volume {AwsEc2EbsVolume} is encrypted using the default AMS managed keys. It is recommended for security reasons to use customer managed keys in order to gain more flexibility on managing the key.

• 

  Recommended Mitigation

  Configure a CMK for encryption. You can configure a default customer key for encryptiion. See more: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html#EBSEncryption_key_mgmt