The AWS Security Whitepaper alludes that traffic is encrypted . I'm thinking, the protection against packet sniffing at the end is a reference to encryption. But even though it says "benefits described below", "sniffing" or "sniff" is never mentioned again in the paper and If not all traffic is encrypted, what would be a way to go about encrypting certain traffic?