In order to enable encryption at rest using EC2 and Elastic Block Store you need to

A.
Configure encryption when creating the EBS volume

B.
Configure encryption using the appropriate Operating Systems file system

C.
Configure encryption using X.509 certificates

D.
Mount the EBS volume in to S3 and then encrypt the bucket using a bucket policy.