• Encrypt storage volumes with customer managed keys.
  • Secure snapshots and other data.
  • Implement storage security best practices.