• Encrypt data at rest (client side; server side; envelope encryption) using AWS services
  • Encrypt data in transit