Status: IN
DAX traffic between the application and cluster always stays within the VPC via ENIs with private IPs, regardless of whether encryption in transit is enabled.
Source: entries/2026/03/11/amazondynamodb-latest-developerguide-DAXEncryptionInTransithtml.md