https://www.rtl-sdr.com/rtl-sdr-tutorial-receiving-noaa-weat...
Usually the export laws and restrictions (ITAR) refer to the technology used to launch the satellites, not the data they downlink.
But if you had the key, you could also use encrypted satellite data.
(Edit note: the parent changed their text to say intelligence data, which is obviously not what I was talking about)
Encryption is still not necessarily required, unless you are landing the signal only on a groundstation in the United States.
AWS can handle ITAR controlled data though. They already have the AWS GovCloud for data subjet to ITAR restrictions.
But usually the science type or payload data is one thing, and then the lower level hardware telemetry is done in a different way.
I've used GovCloud to store ITAR data. It's cool. If you encrypt your ITAR data, you can also store it in a public cloud like S3, but just for storage, you shouldn't decrypt it there or have the keys there.
Source: I worked on the telemetry team at SpaceX.