diff --git a/config.cfg b/config.cfg
index b6f97bb5..c8d6649c 100644
--- a/config.cfg
+++ b/config.cfg
@@ -95,6 +95,7 @@ cloud_providers:
     size: s-1vcpu-1gb
     image: "ubuntu-18-04-x64"
   ec2:
+    encrypted: true
     size: t2.micro
     image:
       name: "ubuntu-bionic-18.04"
diff --git a/roles/cloud-ec2/defaults/main.yml b/roles/cloud-ec2/defaults/main.yml
index 7cba6223..8060eb72 100644
--- a/roles/cloud-ec2/defaults/main.yml
+++ b/roles/cloud-ec2/defaults/main.yml
@@ -1,6 +1,6 @@
 ---
 ami_search_encrypted: omit
-encrypted: false
+encrypted: "{{ cloud_providers.ec2.encrypted }}"
 ec2_vpc_nets:
   cidr_block: 172.16.0.0/16
   subnet_cidr: 172.16.254.0/23