It must be decrypted, at least in the memory, otherwise the node couldn't function. Amazon has physical access to the machines.