Big-IP VE Encryption-at-Rest 12.1.2+

I have a compliance requirement to only deploy instances w/ encrypted storage inside AWS but I haven't found a good option for Big-IPs. You can't deploy a marketplace template w/ encrypted storage and I haven't found any solution for OS based encryption. Has anyone found a solution for Big-IP data at rest?

https://support.f5.com/csp/article/K00150531

https://devcentral.f5.com/articles/complying-with-pci-dssndashpart-2-protect-cardholder-data