EC2: Enable EBS single step encryption by default

[jackivanov]

Description

• Disable the ami copy task that takes too much time to make an encrypted volume
• Enable EC2 EBS single step encryption by default

Motivation and Context

As @TC1977 noted #989 (comment), it is possible now to enable EBS encryption in one go without waiting too much time. Also, it makes sense now to enable it by default.

How Has This Been Tested?

Deployed to EC2 with and without encryption.

Types of changes

• [] Bug fix (non-breaking change which fixes an issue)
• [] New feature (non-breaking change which adds functionality)
• [] Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist:

• I have read the CONTRIBUTING document.
• My code follows the code style of this project.
• All new and existing tests passed.

[TC1977]

Tested successfully on EC2 us-east-1 using non-interactive Ansible deploy, both with "encrypted=true" and "encrypted=false".

With default settings of everything false, I have a run time of about 8:16 with -vvv and encrypted=true, and 8:39 with -vvv and encrypted=false. I have no idea why the encrypted run was faster (maybe because I was deleting the CloudFormation at the same time for the unencrypted run?), but at least there isn't a 6-minute performance hit with encryption like before.

Back when I last timed run times with #976, I got 8:23 for the unencrypted run and 14:23 for the encrypted run.

[TC1977]

Ok, that explains why the encrypted run was faster - both runs were encrypted. 😆

Running the newest commit with "encrypted=true" vs false and no -vvv gives run times of 8:38 with encryption vs. 8:28 without encryption.