- Prevents public access to buckets and objects
- Encrypts all objects within the bucket
- Replicates the bucket to another region
- Limits the number of objects that can be stored in the bucket