Your company is planning to host an application on a set of EC2 Instances. There is a requirement for complete end-to-end encryption for the data to ensure that the application is (HIPAA) compliant. How can you achieve this?

Answer options:

A.Ensure that the traffic is encrypted using KMS.
B.Set up a VPN connection between the EC2 Instance and the Internet.
C.Set up a Direct Connect connection between the EC2 Instance and the Internet.
D.Use TLS 1.2 or later to encrypt all the data.

Answer – D
Since the data needs to be encrypted end to end, use an SSL certificate that can be mapped to the application. AWS recommends TLS 1.2 or later.
Option A is incorrect because this can be used to encrypt data at rest.
Option B is incorrect because this will not encrypt traffic end to end.
Option C is incorrect because this is not a feasible option for this scenario.
Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/SSL-on-an-instance.html
Refer to page 29 on the below link:
https://d0.awsstatic.com/whitepapers/compliance/AWS_HIPAA_Compliance_Whitepaper.pdf