AWS Public Sector Blog
Author: J.D. Bean
J.D. Bean is a senior solutions architect at Amazon Web Services (AWS). His interests include security, privacy, and compliance. He is passionate about his work enabling AWS customers’ successful cloud journeys. J.D. holds a bachelor of arts from The George Washington University and a juris doctor from New York University School of Law.
Encryption-in-transit for public sector workloads with AWS Nitro Enclaves and AWS Certificate Manager
Government, education, nonprofit, healthcare, and other public sector organizations process and store sensitive data including health records, tax data, PII, student data, criminal justice information, and financial data. These workloads carry stringent security and compliance requirements to protect the confidentiality, integrity, and availability of this data both in transit and at rest. Best practices for protection of data in transit include enforcing appropriately defined encryption requirements, authenticating network communications, and implementing secure key and certificate management systems. In this post, I demonstrate a solution for deploying a highly available and fault tolerant web service with managed certificates and TLS termination performed on customer-managed EC2 Nitro instances using ACM for Nitro Enclaves.