Already so many people have written about what/why Encryption at REST.
So I am just going to help you to setup Encryption at REST in ubuntu using luksFormat.
You can read more about the cryptsetup and LuksFormat here
Step 1: Create crypt volume file format
Assuming the device is /dev/xvdc. Please do not forget the passphrase. You will not be able to recover the data if you forget.