There are multiple choices available for your source code repository. You can set up, run, and manage your Git server, where you will be responsible for everything. You can choose to use a hosting service such as GitHub or Bitbucket. If you are looking for a cloud solution, then AWS CodeCommit offers a secure, highly scalable, and managed source control system where you can host private Git repositories.

You need to set up authentication and authorization for your code repository to provide access to authorize team members for code to read or write. You can apply data encryption in transit and at rest. When you push into the code repository (git push), it encrypts the data and then stores it. When you pull from the code repository (git pull), it decrypts the data and then sends the data back to the caller. The user must be an authenticated user with the proper access level to the code repository. Data can be encrypted in transit by transmitting through encrypted network connections using HTTPS or SSH protocols.