I'm looking into using Heroku as our platform instead of managing our own systems. We have a Ruby/Rails stack and use Resque as our background job processor. I'm evaluating addons such as RedisToGo and RedisGreen, but it looks like there's no secure transport layer for all the services. However, according to RedisGreen's FAQ it doesn't matter:
Do you offer an encrypted connection to your servers?
No. Most organizations working in EC2 or Heroku treat Amazon’s internal network as a “trusted” one, so transport-level security doesn’t make much sense. We recommend against transferring data that should be secure over the open Internet.
As an Ops guy, makes me feel a bit queasy to have unencrypted data transfers. On the other hand, they make a good point. If Amazon is considered a trust internal network, then we wouldn't have to worry about 3rd parties trying to sniff us out.
So my question: is it safe to use these add-ons if I'm on the Heroku/EC2 ecosystem?