It probably was, but Amazon's bucket checkbox encryption doesn't protect against an authorized user reading the data. It's trivially easy to encrypt things on

It probably was, but Amazon's bucket checkbox encryption doesn't protect against an authorized user reading the data. It's trivially easy to encrypt things on AWS, but the attack you're protecting against is someone walking off with the HD, which is not really the important threat. Well, that and making sure that the auditor can check off 'encrypted at rest' on the sheet.