Protect your data from ransomware with S3 Object Lock
blog.symops.com
Protect your data from ransomware with S3 Object Lock
1–10 of 23 posts
Re: Protect your data from ransomware with S3 Object Lock
#2What happens if you lock objects then stop paying your bill?
Re: Protect your data from ransomware with S3 Object Lock
#3> No one, including AWS can shorten the retention period
I don't think this is true. Isn't it more like you can't, and AWS can but promises that they won't?
Re: Protect your data from ransomware with S3 Object Lock
#4I use backblaze which will backup any modified file and has copies back 30 days, longer if desired. It would be great if there was some way (is there?) To flag if a file was recently encrypted to detect potential ransomware early before backups are corrupted also. Seems like a changed file being backed up could be compared to the previous unencrypted file for this purpose.
Of course this would be more complicated if the files were user-encrypted in the first place, but good tools to detect these things asap would have a good market above & beyond antivirus that is more focused on detection of the virus and not a complete packaged of file recovery as well.
Re: Protect your data from ransomware with S3 Object Lock
#5I use backblaze which will backup any modified file and has copies back 30 days, longer if desired. It would be great if there was some way (is there?) To flag if a file was recently encrypted to detect potential ransomware early before backups are corrupted also. Seems like a changed file being backed up could be compared to the previous unencrypted file for this purpose. Of course this would be more complicated if…
No post body was provided.
Re: Protect your data from ransomware with S3 Object Lock
#6> No one, including AWS can shorten the retention period I don't think this is true. Isn't it more like you can't, and AWS can but promises that they won't?
Yes, AWS must still be able to delete the data if you stop paying but there must be a LOT of safeguards in place so Object Lock still makes it impossible for anyone outside of AWS to delete the data.
Re: Protect your data from ransomware with S3 Object Lock
#7What happens if you lock objects then stop paying your bill?
AWS must be able to delete the data but since you stopped paying it must not be important to you anymore. No one outside of AWS can delete the data and presumably no one inside AWS can delete Object Locked data IF your bill is payed.
Re: Protect your data from ransomware with S3 Object Lock
#8A less permanent solution is to use versioned buckets with MFA Delete turned on. You can then cleanup versions if you need to by disabling MFA delete, which requires the MFA to do. So as long as your MFA device is not on-line, then if someone compromises your servers, they cannot disable MFA delete and cannot remove versioned objects.
Re: Protect your data from ransomware with S3 Object Lock
#9A less permanent solution is to use versioned buckets with MFA Delete turned on. You can then cleanup versions if you need to by disabling MFA delete, which requires the MFA to do. So as long as your MFA device is not on-line, then if someone compromises your servers, they cannot disable MFA delete and cannot remove versioned objects.
No post body was provided.
Re: Protect your data from ransomware with S3 Object Lock
#10Can't ZFS do these kinds of things with snapshot?