Encryption solutions

Question 1

S3

Answer 1

has built in features that allow you to encrypt your data:

1. AES-256 bit encryption that encrypts data-at-REST in an S3 bucket.
2. AWS will decrypt the data and sent to you when you download it.

Question 2

EBS encrypted volumes

Answer 2

You can select to have all data encrypted that is stored on an EBS for volume
if a snap0shot it taken, that snap-shot is automatically encrypted.

Question 3

RDS encryption

Answer 3

encrypts the underlying storage space for the instance.
automated backups are encrypted
read replicas are encrypted
RDS provides SSL endpoints to encrypt a connection to a DB instance.