AWS provides various methods for encrypting AWS RDS resources which includes encrypting data-at-rest in the underlying DB instances, automated backups, read replicas, and snapshots.

Since 2015, S3 has come equipped with a VPC endpoint but this has not allowed AWS users to access S3 from on-premise solutions over secure connections like AWS Direct Connect or AWS VPN.