Ensure all data transmission uses TLS/SSL encryption.

• Terminate TLS at the load balancer or API Gateway
• Use Managed Certificate Managers (ACM, Azure Key Vault) for automated rotation
• Enforce HTTPS-only communication via load balancer redirects or CloudFront viewer policies