Describe your approach to securing sensitive data both in transit and at rest within a cloud environment.