Ephemeral OS disks can be encrypted at host using platform managed keys or customer managed keys. The default is platform managed keys. This feature would enable our customers to meet your organization's compliance needs.
Refer to the documentation for more details on encryption at host.
Learn more about Ephemeral.