I guess I assumed all data at AWS was encrypted at rest. Disturbing if not. Compare:

https://cloud.google.com/security/encryption-at-rest/default...