I need to safely store some encrypted information in EC2. For this purpose, I'd like to encrypt a filesystem on my EBS drives to ensure that third-parties won't be able to poke around in my data. However, I have an inherent fear of encrypting partitions due to total, colossal failure of the entire filesystem when a single block fails.
To overcome this, I thought of simply using two EBS volumes in RAID-1 using
mdadm. Unfortunately, I'm not sure if this mitigates the problem. I know that doing RAID-1 will cut my write speeds in half (or worse), but will it protect me in the case of a block failure, enabling me to still be able to restore my information from the other EBS volume?
What's the best way to store data in an encrypted filesystem in the cloud, specifically Amazon's cloud?