In the "Using KMS with EBS" lecture, there was a long winded approach shown to encrypt the EBS volume. AWS seems to have made it much easier now, by allowing the root volume to be encrypted before the instance is launched. There is no need to create AMIs from Snapshot and copy them to encrypt!
Very true. 🙂
Take time to understand the long way, then try the short way.
The end result will be a higher understanding.
In the meantime I will ticket this to have the lecture reviewed.