A municipal microservices mesh must encrypt service-to-service calls inside the VPC and limit which tiers may talk to each other. Which controls should the architect emphasize?
Select an answer to reveal the explanation.
Short Explanation
Inside the building, you still lock wing doors and use private conversations—not megaphones in the lobby. TLS between services plus tight security groups keep east-west traffic honest. All-open SG rules, public NLBs for everything, or secrets in AMIs are the megaphone approach.
Full Explanation
East-west security inside a VPC combines transport encryption (TLS) for sensitive service-to-service calls with security group rules that allow only required sources, ports, and tiers. Flat allow-all intra-VPC rules and publicly exposed microservices expand blast radius. Embedding unrehashed plaintext credentials in AMIs weakens workload security independent of network controls. Associate-level designs therefore pair micro-segmentation with encryption in transit.