> AWS's hard disks are a physical thing that is offsite Taking tapes to a secure offsite location means they're air-gapped from the source data, so even in a s

> AWS's hard disks are a physical thing that is offsite Taking tapes to a secure offsite location means they're air-gapped from the source data, so even in a situation where an entire network is compromised, remotely-stored tapes can't be wiped/encrypted. I'm sure AWS has thought about this issue while designing Tape Gateway, but it's not clear to me how it could know whether a request to retrieve and overwrite a virtual tape was legitimate or not.