> For the complete documentation index, see [llms.txt](https://wiki.songer.pro/interviewing/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.songer.pro/interviewing/aws/securing/how-do-you-secure-data-in-transit-and-at-rest-in-aws.md).

# Secure data in transit and at rest in AWS

<details>

<summary>Secure Data in Transit:</summary>

1. Use HTTPS/SSL protocols to communicate between your application and AWS services.&#x20;
2. Use AWS Key Management Service (KMS) to encrypt your data when it is in transit.&#x20;
3. Use AWS VPN or AWS Direct Connect to create a private network connection between your datacenter and AWS.

</details>

<details>

<summary>Secure Data at Rest:</summary>

1. Use AWS KMS to encrypt your data at rest.&#x20;
2. Use AWS Identity and Access Management (IAM) to manage user access to data stored in AWS.&#x20;
3. Use Amazon Virtual Private Cloud (VPC) to create a secure and isolated environment for your data.
4. Use AWS CloudTrail to monitor and log all API calls made to your AWS resources.
5. Use Amazon S3 Object Lock to control access to data stored in Amazon S3 buckets.

</details>