Configuration block for encrypt at rest options. Only available for certain instance types. Detailed below.