A legacy report engine on EC2 writes citizen extracts to an attached data volume. Security requires that volume's data be encrypted at rest. What should the developers ensure?
Select an answer to reveal the explanation.
Short Explanation
If citizen extracts live on a disk glued to that EC2 box, that disk needs the EBS encryption checkbox — not gzip cosplay or tossing files onto ephemeral scratch space. Encrypt the data volume with EBS/KMS and sleep better.
Full Explanation
EBS encryption protects data at rest on volumes that hold sensitive application data. Developers should attach or migrate to an encrypted volume backed by KMS. Compression is not encryption. Instance store is ephemeral and does not meet durable encrypted storage needs. Publishing snapshots publicly would expose data, not secure it.