How is protected connection between the client and the server carried out when using cloud storage?

How is protected connection between the client and the server carried out when using cloud storage? Based on use of VPN connections or protected protocols at various levels (SSH, TLS/SSL, IPSec)? But in fact, any protected connection between the client and the server is based on use of tunneling by means of various protocols at different levels?

Thank you in advance.