- Server-side encryption using keys managed by AWS
- Client-side encryption
- Encryption in transit
- No encryption