Create an external KMS key (like [this](https://github.com/terraform-aws-modules/terraform-aws-eks/blob/e6c3e90a0268b05e9a4c6f5e51bbbe593538a696/examples/self_managed_node_group/main.tf#L375-L385)) and using for encryption on - EBS: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ebs_default_kms_key - EFS: https://github.com/terraform-aws-modules/terraform-aws-efs/blob/v1.6.0/examples/complete/main.tf#L31-L32 - Bucket: - https://github.com/terraform-aws-modules/terraform-aws-s3-bucket/blob/v4.0.1/examples/complete/main.tf#L147-L148 - https://github.com/terraform-aws-modules/terraform-aws-s3-bucket/blob/v4.0.1/examples/complete/main.tf#L211-L218 - EKS: https://github.com/terraform-aws-modules/terraform-aws-eks/blob/e6c3e90a0268b05e9a4c6f5e51bbbe593538a696/examples/self_managed_node_group/main.tf#L56-L61
Create an external KMS key (like this) and using for encryption on