Salesforce Shield doesn’t support Big Objects or outside data store (AWS Cloud). So, we built our own encryption tool as part of the product offering using the AES 256 algorithm & key rotation. This solution has been aligned and validated by the Salesforce ISV tech team. This supports both Big Objects and outside storage out of the box.