Your company is planning on hosting an application on a set of EC2 Instances. There is a requirement for complete end to end encryption for the data to ensure that the application is (HIPAA) compliant. How can you achieve this?

Answer options:

A.Ensure that the traffic is encrypted using KMS
B.Setup a Virtual gateway between the EC2 Instance and the Internet
C.Setup a Direct Connect connection between the EC2 Instance and the Internet
D.Use SSL to encrypt all the data at the transport layer

Answer – D
Since the data needs to be encrypted end to end, use an SSL certificate which can be mapped to the application.
Option A is incorrect because this can be used to encrypt data at rest
Option B is incorrect because we need a full VPN connection and not just the virtual gateway alone
Option C is incorrect because this is not a feasible option for this scenario
Below is an example on how to use SSL with an Apache Instance on EC2
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/SSL-on-an-instance.html