diff --git a/serverless-resources.yml b/serverless-resources.yml
index 9e8f6db..8766957 100644
--- a/serverless-resources.yml
+++ b/serverless-resources.yml
@@ -84,6 +84,10 @@ rBuildsEcsLaunchTemplate:
           Ebs:
             VolumeType: gp3
             VolumeSize: 96
+            Encrypted: true
+      MetadataOptions:
+        HttpTokens: required
+        HttpPutResponseHopLimit: 2
 
 rBuildsBatchComputeEnvironment:
   Type: AWS::Batch::ComputeEnvironment