https://ones.com/blog/knowledge/aws-data-encryption-rest-transit-guide/