MEDIUM
Source
CloudSploit
ID
boot-volume-cmk-encryption

Boot Volume CMK Encryption

Ensures that boot volumes have encryption enabled using desired protection level.

By default, boot volumes are encrypted using an Oracle-managed master encryption key. To have better control over the encryption process, you can use Customer-Managed Keys (CMKs).

Ensure all boot volumes have desired encryption level.