title: How to protect AWS S3 uploaded / downloaded data, in transit?
body: <p>When we upload data to S3, is it protected in transit by default (via HTTPS maybe)?</p>
  
  <p>I found <a href="https://aws.amazon.com/articles/1928" rel="nofollow noreferrer">this article</a> which, if I understand correctly, states S3 does not use HTTPS:</p>
  
  <blockquote>
    <p>Amazon Simple Storage Service: You can still use HTTP with Amazon S3
    and securely make authenticated requests. The service uses a different
    secure signing protocol.</p>
  </blockquote>
  
  <p>Should we in this case protect the data in transit with <a href="http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html" rel="nofollow noreferrer">Client-Side Encryption</a>?</p>