Encryption at rest, in transit

Also written: encryption at rest, encryption in transit

Data scrambled on disk (S3 and DynamoDB do this by default) and data sent over HTTPS.