A municipal CRM must export nightly files to partners through AWS Transfer Family. Policy requires encryption in transit for every transfer. Which design choice satisfies that requirement?
Select an answer to reveal the explanation.
Short Explanation
File drops over the open internet need a sealed pipe, not a postcard. FTPS or SFTP on Transfer Family keeps the session encrypted in transit. Plain FTP and public HTTP ignore that rule even if the object sits encrypted in S3.
Full Explanation
Encryption in transit for managed file transfer is achieved by using protocols such as FTPS or SFTP on AWS Transfer Family. Plain FTP and unauthenticated HTTP expose data on the wire. Encrypting objects only at rest in S3 does not satisfy a TLS-only transfer mandate for partner exports.