Ephemeral OS disk customers can choose encryption type between platform managed keys or customer managed keys for host-based encryption. The default is platform managed keys. This feature would enable our customers to meet your organization's compliance needs.
Refer to the documentation for more details on encryption at host.
Learn more about Ephemeral.