How to encrypt an unencrypted EBS volume attached to an EC2 instance?

Difficulty: unrated

Source: bregman-arie/devops-exercises by Arie Bregman

Answer

Create EBS snapshot of the volume
Copy the snapshot and mark the "Encrypt" option
Create a new EBS volume out of the encrypted snapshot