3 ms·
I use a single bucket with versioning enabled. Production server has access to write as it pleases, but isn't allowed to touch past versions of a file.
by luhn 7y ago
I use a single bucket with versioning enabled. Production server has access to write as it pleases, but isn't allowed to touch past versions of a file.
- eropple 7y agoS3 now allows permanent object locking, too, which makes this even harder to screw up.
- brazzledazzle 7y agoI think having the bucket in a different account with different root/MFA might make sense here too. Your production AWS account is more likely to get owned than your account dedicated to backups.
- luhn 7y agoYes! The bucket is located in a different account with separate billing and very limited on who has root/admin access.