Yes. Encryption at rest and in transit using AWS KMS and TLS/SSL. Yes, admin action can be audited.