Amazon S3 security guidelines

The following guidelines apply if you are using AWS S3 for DAOS tier 2 storage.

These are very broad guidelines; refer to the AWS S3 documentation for more details and to understand all your options.
  • Create an S3 bucket for the exclusive use of Domino.
  • For maximum security, enable bucket encryption.
  • Create a user identity for Domino to use (aws_access_key_id and aws_secret_access_key).
  • Configure access control for the bucket to restrict access to the Domino user.
  • (Recommended) Create a policy to whitelist which IP addresses can connect to the bucket.