ARE MY AWS RESOURCES ENCRYPTED OR UNENCRYPTED BY DEFAULT?

Summary from the TLDR InfoSec newsletter

Fog Security investigated 51 different AWS resources and found that only 76% of them were encrypted by default, with 22 of those being encrypted with AWS Owned Keys by default. Even when encrypted by default, services that used AWS Owned Keys were shared between AWS accounts and don't typically offer more access controls. AWS Managed Keys are controlled by AWS and typically implicitly grant access to IAM principals in the same account, so they may offer less protection than expected. Fog Security recommends enabling encryption by default where possible and also opting for the use of AWS Customer Managed Keys where possible.