When in AWS either by using an encrypted s3 bucket with a versioned file and accessed by applications using roles on the instance they are on or if hardcore sec

When in AWS either by using an encrypted s3 bucket with a versioned file and accessed by applications using roles on the instance they are on or if hardcore security is required through KMS.