diff --git a/pkg/asset/machines/aws/machines.go b/pkg/asset/machines/aws/machines.go
index e0874d06520..04bbf6e8dfb 100644
--- a/pkg/asset/machines/aws/machines.go
+++ b/pkg/asset/machines/aws/machines.go
@@ -87,6 +87,7 @@ func provider(clusterID string, platform *aws.Platform, mpool *aws.MachinePool,
 					VolumeType: pointer.StringPtr(mpool.Type),
 					VolumeSize: pointer.Int64Ptr(int64(mpool.Size)),
 					Iops:       pointer.Int64Ptr(int64(mpool.IOPS)),
+					Encrypted:  pointer.BoolPtr(true),
 				},
 			},
 		},