For the record I'm currently using:
aws ec2 describe-volumes --region us-east-1 --filters Name=encrypted,Values=false Name=attachment.status,Values=attached --query "length(Volumes)"
What I want is to filter that down further to just the instances that are running. (ie exclude the ones that are stopped).
My question is: How can I get a list of encrypted disks for instances that are running on the AWS CLI?