If you have sensitive data, you can use Amazon Kinesis Data Firehose enable server-side data encryption . Way to do this depends on your data source.
Use Kinesis Data Streams as the data source for the encryption server
When configured as a data stream Kinesis Kinesis Data Firehose source transport stream, Kinesis Data Firehose not store the data in a static manner. The data is stored into the data stream.
When streaming data, Kinesis Data Streams will use the key to encrypt data AWS Key Management Service (AWS KMS) before the static storage data from the creator to the data. When Kinesis Data Firehose transport stream data read from the data stream, Kinesis Data Streams to decrypt the data, and send it to the Kinesis Data Firehose. Kinesis Data Firehose prompt the specified data into the buffer memory buffer, and then transmitted to the target, rather than statically stored unencrypted data.