4 ms·
One point which rarely gets mentioned is that to use S3 you need to have the access codes on the server. So theoretically a malicious individual could break in
by streety 16y ago
One point which rarely gets mentioned is that to use S3 you need to have the access codes on the server. So theoretically a malicious individual could break into your server and delete all your files on that box and then wipe all the files on S3.
Tarsnap enables you to separate out the ability to write/read/delete. So a compromised box could at worst be used to inflate your tarsnap bill but not to wipe out all your backups.
- pbourke 16y agoS3/AWS multi-factor authentication, in combination with bucket versioning, ensures that if you can keep a redundant offsite record of your key and version information, you can always retrieve your data. An attacker requires your key fob to permanently delete an item. Of course, you'll need to physically secure your key fob. http://aws.amazon.com/mfa/ http://aws.amazon.com/mfa/
- streety 16y agoIt has been a while since I looked at S3 and didn't spot multi-factor authentication at the time. At only $13for the fob it seems like an interesting alternative. Thanks for the follow-up.
- mleonhard 16y agohttp://www.restbackup.com/ http://www.restbackup.com/ also provides protection from deletion. Rest Backup has an HTTP REST API so you can do backup & restore with curl. I'm launching the Rest Backup beta next week.