#查看默认设置的加密
aws ec2 get-ebs-encryption-by-default --region us-west-1

#默认启用加密,对地域开启ebs全局生效
 aws ec2 enable-ebs-encryption-by-default --region us-west-1

#默认禁用加密
aws ec2 disable-ebs-encryption-by-default --region region

参考文档

https://docs.aws.amazon.com/zh_cn/AWSEC2/latest/UserGuide/EBSEncryption.html