How would you secure data in transit versus data at rest within a cloud environment like AWS or Azure?