AWS introduced VPC Encryption Controls in GovCloud (US) Regions to simplify auditing and enforcing AES-256 hardware encryption across network traffic between VPC resources. This service detects plaintext traffic flows and automatically activates encryption on supported paths including Fargate and load balancer traffic.
The capability aids compliance with standards like HIPAA, PCI DSS, and FedRAMP by centrally enabling transparent encryption between EC2 Nitro instances, VPC peers, and across multiple Availability Zones and Regions. Audit logs further assist security teams in compliance reporting and enforcement.
Source & further reading
AWS VPC Encryption Controls now available in AWS GovCloud (US) Regions ↗Source published 2026-04-01. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.