Encryption at rest:
Aurora uses AWS Key Management Service (KMS) to encrypt your data stored on disk, including automated backups, snapshots, and replicas. You can enable encryption when you create the Aurora cluster.
Encryption in transit:
Aurora uses Transport Layer Security (TLS) to secure data in transit between the client application and the Aurora database instance. You can require your client connections to use SSL/TLS to ensure data is encrypted while moving over the network.