Currently we can use EBS Encryption if we are deployed into an existing environment with encryption enabled. Customers should be able to choose to enable EBS Encryption when deploying a new site if it it not already enabled.