Cloud templates for the EC2 should include a field to enable disk encryption for EBS volumes. Currently, it seems to be unencrypted without any option to specify otherwise. For builds that include sensitive information, this is a must.