Data protection in AWS DataSync - AWS DataSync

Data protection in AWS DataSync

You can configure AWS DataSync to meet your security and compliance needs, including protecting your data.

Data encryption

DataSync uses Transport Layer Security (TLS) 1.2 to encrypt all network traffic that is transferred between your agent and AWS.

For data stored in Amazon S3, DataSync supports S3-managed encryption keys (SSE-S3) or AWS Key Management Service (SSE-KMS).

For data stored in Amazon EFS, Amazon FSx for Windows File Server, and Amazon FSx for Lustre file systems, DataSync supports the at-rest encryption capabilities provided by those services.

Learn more about how AWS Storage services manage reading and writing encrypted data: