https://avd.aquasec.com/misconfig/aws/ec2/ebs-encrypted-snapshots/