Skip to main content

Security & Compliance

Aurora provides security controls to meet stringent compliance requirements.

Core controls​

  • Optional server-side encryption at rest (enable at bucket creation in the UI).
  • Bucket versioning for recovery and audit.
  • Object Lock for WORM immutability (Governance/Compliance modes).
  • Fine-grained API key permissions scoped to buckets.

Recommendations​

  • Use least-privilege API keys; avoid Delete on immutable workloads.
  • Separate duties (writer, reader, retention manager) to minimize blast radius.
  • Enable Object Lock for regulated data and set default retention.
  • Log and monitor access patterns via your application.

Data residency and sovereignty​

  • Choose an endpoint region appropriate to your residency requirements.
  • Coordinate with Aurora if you need custom residency assurances.