It would be great if this tool could also cover RDS encryption and re-encryption. I think it follows a very similar pattern to volume encryption.
https://repost.aws/knowledge-center/update-encryption-key-rds
https://repost.aws/knowledge-center/ebs-change-encryption-key