Secure cloud object storage with proper access controls and encryption.

• Enable "Block Public Access" at the account level if public buckets are not required
• Write bucket policies to enforce encryption and secure transport
• Enable versioning and object locks for ransomware resilience