A browser exchanges sensitive information with a web application.
The team needs to protect data while it moves across the network.
Which control protects data in transit?
TLS-based HTTPS protects data while it travels between the browser and the web application; storage encryption addresses a different state.
Detailed explanation
TLS encrypts the communication channel and helps protect data from interception or tampering in transit.
TLS encrypts the communication channel and helps protect data from interception or tampering in transit.
Config evaluates resource configuration and does not provide transport encryption.
Config evaluates resource configuration and does not provide transport encryption.
IAM controls authentication and authorization; it does not encrypt data on a network path.
IAM controls authentication and authorization; it does not encrypt data on a network path.
This protects data at rest in storage, not the communication path between the browser and application.
This protects data at rest in storage, not the communication path between the browser and application.
Check official documentation
Compare the following points with the official documentation.
AWS Well-Architected Framework Security Pillarのデータ保護とTLSの説明を確認する。
What to confirm
ブラウザとWebアプリケーション間の通信にHTTPS/TLSを用いる。
Key points
- Data in transit
- HTTPS
- TLS
Notes
- Environment: AWS公式セキュリティ設計資料の確認
- Confirm current service capabilities and compliance guidance in the official AWS documentation.
Foundation review
Protection by state
Transport encryption and storage encryption protect different stages of a data lifecycle.
Transport control
HTTPS/TLS helps reduce interception and tampering risks on the communication path.