Also, services like AWS ECS support automatic encryption of traffic between services. They handle the generation, distribution, and rotation of keys: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect-tls.html