| Per the documentation, "If you are creating a volume from a snapshot, you can't specify an encryption value. This is because only blank volumes can be encrypted on creation. " That means the volume has been encrypted before creation for the root, for additional disk, different story |