3 ms·
Of course, that also means that now you don't have backups of your files.
by crooked-v 3y ago
Of course, that also means that now you don't have backups of your files.
- 0x457 3y agoThey do have backups if versioning is enabled on S3.
- ericbarrett 3y agoYes, S3 is extremely reliable and versioning protects against “oopsies.” I do always recommend disallowing s3:DeleteObjectVersion for all IAM roles, and/or as a bucket policy; manage old versions twith a lifecycle policy instead. This will protect against programmatic deletion by anybody except the root account.
- brazzledazzle 3y agoI second these sensible protections. Also would recommend replicating your bucket as a DR measure. Ideally to another (infrequently used and separately secured) account. Even better if you do it to another region but I think another account is more important since the chances of your account getting owned is higher than amazon suffering a total region failure.