AWS DataSync
User Guide

Encrypting Your Data

AWS DataSync uses TLS (Transport Layer Security) to encrypt data that is transferred between your agent and AWS. For data stored in Amazon S3, DataSync supports Amazon S3-managed encryption keys (SSE-S3) and Amazon EFS file system encryption for data stored in Amazon EFS. When reading and writing data from Amazon S3, DataSync works with Amazon S3 Default Encryption for S3 Buckets, as described in the Amazon Simple Storage Service Developer Guide. When reading and writing data from Amazon EFS, DataSync works with Amazon EFS file system encryption of data at rest, as described in Amazon Elastic File System User Guide.