Why the Guardian is using encrypted EC2 root volumes on AWS

https://amp.theguardian.com/info/2018/mar/12/why-the-guardian-is-using-encrypted-ec2-root-volumes-on-aws
Using encrypted EC2 root volumes: harder than you'd think it would be.