The following guidelines apply if you are using AWS S3 for DAOS tier 2 storage.

These are very broad guidelines; refer to the https://docs.aws.amazon.com/AmazonS3/latest/dev/ for more details and to understand all your options.

• Create an S3 bucket for the exclusive use of Domino.
• For maximum security, enable bucket encryption.
• Create a user identity for Domino to use (aws_access_key_id and aws_secret_access_key).
• Configure access control for the bucket to restrict access to the Domino user.
• (Recommended) Create a policy to whitelist which IP addresses can connect to the bucket.