Connect to an EC2 Linux instance without weakening its security: verify the instance and host key, protect the SSH private key, choose the correct AMI username and address, restrict ingress, and diagnose timeout versus authentication failures.
Use scp for a straightforward one-off copy, rsync over SSH for repeatable or resumable directory synchronization, SFTP for interactive/file-oriented workflows, and a tar stream for carefully controlled archive pipelines. The protocol encrypts transport; you still need host verification, least privilege, safe destination semantics, and end-to-end validation.