# Data encryption
<a name="data-encryption"></a>

## Encryption at rest
<a name="encryption-rest"></a>

Amazon Bedrock AgentCore stores data at rest using Amazon DynamoDB and Amazon Simple Storage Service (Amazon S3). The data at rest is encrypted using Amazon encryption solutions by default. AgentCore encrypts your data using Amazon owned encryption keys from Amazon Key Management Service. You don’t have to take any action to protect the Amazon managed keys that encrypt your data. For more information, see [Amazon owned keys](https://docs.amazonaws.cn/kms/latest/developerguide/concepts.html#aws-owned-cmk) in the * Amazon Key Management Service Developer Guide*.

 **Key considerations** 
+ The following data is not encrypted by default:
  + Gateway names
  + Gateway target names
  + Gateway tool names
  + Gateway CloudWatch logs
+ Customers can encrypt the following resources with a customer-managed KMS key:
  + Gateways – For more information, see [Encrypt your AgentCore gateway with a customer-managed KMS key](gateway-encryption.md).

## Encryption in transit
<a name="encryption-transit"></a>

All communication between customers and Amazon Bedrock AgentCore and between AgentCore and its downstream dependencies is protected using TLS 1.2 or higher connections.

Encryption in transit is configured by default for the following services:

 **Key considerations** 
+ All outbound traffic for AgentCore Gateway is protected using TLS.
+ When invoking a gateway, note the following about the data that is transferred:
  + During a *call tool* request, the service transforms the data in the request and makes a call to the customer-configured web service. The response from the web service is transformed and returned as a *call tool* response to the invoker.
  + During a *list tools* request, the request is a standard MCP list/tools operation request and the response contains a list of tools configured on the gateway by the customer during control plane operations.

## Key management
<a name="key-management"></a>

You can use Amazon KMS customer managed keys for the following Amazon Bedrock AgentCore resources:

 **Resources that support Amazon KMS customer managed keys** 
+ Memories. For more information, see [Create an AgentCore Memory](memory-create-a-memory-store.md).
+ Gateways. For more information, see [Encrypt your AgentCore gateway with a customer-managed KMS key](gateway-encryption.md) . Note the following:
  + For AgentCore Gateway resources, Amazon managed keys are single-tenant use and different for each region.
  + If a key encrypting your gateway is compromised, you should rotate the key or delete the gateway and create a new one with a new key.
  + AgentCore Gateway integrates with Amazon Certificate Manager. For more information, see [Amazon Certificate Manager User Guide](https://docs.amazonaws.cn/acm/latest/userguide/)