All terms
Glossary
Encryption at rest and in transit
Data is encrypted both while being transferred and while being stored.
In transit means TLS for every connection, including between internal services. At rest means encrypted volumes, databases and backups.
In the cloud both are largely a setting rather than a project, which makes the question of why not hard to answer.
How you notice it
- Personal data is stored unencrypted.
- Internal connections run without TLS.
- A customer or auditor asks about data at rest.
Frequently asked
Is the encryption AWS provides enough?
For the loss of a disk yes, it covers that. Against an attacker with valid credentials it does nothing, because the service decrypts for them as usual. That needs tight permissions and your own keys with separate control.