In order to enable encryption at rest using EC2 and Elastic Block Store you need to
Configure encryption when creating the EBS volume
Configure encryption using the appropriate Operating Systems file system
Configure encryption using X.509 certificates
Mount the EBS volume in to S3 and then encrypt the bucket using a bucket policy.