How to convert a unencrypted EBS to be encrypted

It's possible to copy an unencrypted EBS snapshot to an encrypted EBS snapshot. So the following process can be used:

  1. Stop your EC2 instance.
  2. Create an EBS snapshot of the volume you want to encrypt.
  3. Copy the EBS snapshot, encrypting the copy in the process.
  4. Create a new EBS volume from your new encrypted EBS snapshot. The new EBS volume will be encrypted.
  5. Detach the original EBS volume and attach your new encrypted EBS volume, making sure to match the device name (/dev/xvda1, etc.)