Sep 19, 2018

"By default, the AWS CLI uses SSL when communicating with AWS services. For each SSL connection, the AWS CLI will verify SSL certificates.."

Note that this SSL happens whether the CLI runs on an EC2 instance or a remote computer outside AWS, eg a Windows / Linux computer.

Source - AWS CLI documentation.