Encrypt EBS in AD admin node by default

Author: Murielxun

recipes/dir/demo_managed_ad/assets/main.yaml

@@ -479,6 +479,12 @@ Resources:
       Tags:
         - Key: "Name"
           Value: !Sub [ "AdDomainAdminNode-${StackIdSuffix}", {StackIdSuffix: !Select [1, !Split ['/', !Ref 'AWS::StackId']]}]
+      BlockDeviceMappings:
+        - DeviceName: /dev/xvda
+          Ebs:
+            VolumeSize: 8
+            VolumeType: gp2
+            Encrypted: true
       UserData:
         Fn::Base64:
           !Sub