News for hackers. Stuff that matters.

A comment on Tell HN: AWS appears to be down again. Parent comment

Re:Tell HN: AWS appears to be down again by chrisandchris on Wednesday December 22, 2021 @11:31AM (#29651499)
Nope. 3-2-1 strategy. 3 Backups, 2 Medias, 1 Offsite. Now try to delete files from the media in my safe. Only I have a key.

Sure, your threat model may vary. But relying on cloud only for your backup is simply not enough. If you split access for your AWS backup and your DC backup to two different people, you mitigated your thread model. If you only have 1 backup location, that's going to be very hard.

[ Parent | on HN ]
Re:Tell HN: AWS appears to be down again by manquer on Wednesday December 22, 2021 @11:47AM (#29651746)
All of these are questions asked and solved 10 years ago by bean counters who only job is risk mitigation.

Every cloud provider has compliance locks which even root user cannot disable, version history and you can setup your own copy workflow storage container to second container without delete/update access to second one to two different people or whatever.

You don't need to do any of it offsite.

[ Parent | on HN ]
Re:Tell HN: AWS appears to be down again by JackFr on Wednesday December 22, 2021 @11:58AM (#29651945)
Not sure I agree about the usefulness of different media.

Having had to restore databases from tapes and removable drives for a compliance/legal incident, we had a failure rate of >50% on the tapes and about 33% for the removable drives.

I came away not trusting any backup that wasn’t on line.

[ Parent | on HN ]