Encrypt all data stored in cloud services using strong encryption algorithms.

• Enable default encryption for all block storage (EBS, Managed Disks) and object storage
• Encrypt relational databases and data warehouses
• Secure backups and snapshots with separate keys