I'm working on an .net app within aws. Basically our app pulls "generic" data from another organization for the purpose of building customized reports. The data is sent to us via ssl/tls and sent back the same...the processing is all conducted in RAM. It's only when the reports need to go into specific formats is there a period of time where the file is written to local disk and then sent back out. When this transfer is completed, the file is deleted.
Does it make more sense from a security / design perspective to have some program overwrite this file space, encrypt the data locally or on s3. Access outside of this transaction for management purposes is tightly controlled. It seems if there was some way to force the file into a specific container then have some program do a wipe function would be easier than encryption?
This isn't classifed data in terms of pci/hipaa, etc but may contain confidential customer information. Is something like this really a major obstacle from a security perspective as well?