Encryption at rest and in transit

In transit means TLS for every connection, including between internal services. At rest means encrypted volumes, databases and backups.

In the cloud both are largely a setting rather than a project, which makes the question of why not hard to answer.