...
Remediation Steps:
Perform following to ensure ACM uses imported certificates create encrypted workspace volume:
Login to the AWS Management Console at https://console.aws.amazon.com.
Navigate to Workspaces console.
Within the Workspace Console, in the left pane, click on Workspace
Click on Launch Workspaces
For the Workspaces Configuration step, do the following:
Select the volumes to encrypt: Root Volume and User Volume
For Encryption Key, select a CMK that you created.
Click Next Step
Choose Launch WorkSpaces.
...