A hospital is developing a symptom data collection application using Amazon SQS and SNS. The solutions architect must ensure data is encrypted in transit and at rest, and access is restricted to authorized personnel. What steps should be taken to meet these requirements?