All of the AWS APIs are available via SSH-protected endpoints which
provide server authentication. AWS allows customers to use their own
encryption mechanisms for nearly all the services, including S3, EBS,
SimpleDB and EC2. IPSec tunnels to VPC are also encrypted. In
addition, customers can leverage AWS Key Management Systems
(KMS) to create and control encryption keys (refer to
https://aws.amazon.com/kms/). Customers may also use third-party
encryption technologies.
Refer to AWS Cloud Security Whitepaper for additional details