How is encryption ensured during transmission?
All data at amaise is transmitted exclusively over encrypted connections. TLS 1.3 is the preferred standard and is used wherever possible. TLS 1.2 is enforced as the minimum. Older protocols are completely disabled.
Encryption is enforced in layers:
CDN (CloudFront): TLS 1.2+ with HTTP/2 and HTTP/3
Load balancer (ALB): TLS 1.2/1.3 policy
Full-text search (OpenSearch): TLS 1.2+ with node-to-node encryption enabled
Database (Aurora PostgreSQL): TLS with IAM authentication
Object storage (S3): Access exclusively via HTTPS, SSL-only bucket policies enforced
All publicly accessible endpoints automatically redirect HTTP requests to HTTPS.