[blabitty]

Take a look at AWS nitro instances they give you "free" ipsec type network encryption with some caveats I forget.

[acdha]

The main caveat is that it only applies between Nitro instances: not AWS services like load balancer or databases, which would be one of the areas where it’d be most useful for anyone with legacy apps.