Hacker News Reader

does aws actually have that. everythings an API on aws right? so couldnt someone just send the delete backup command to whatever backup service aws has?

View on HN

You send your backups to another AWS account, that has distinct access credentials another responsible party holds (separation of duties), and policies that inhibit the backup source account from deleting or modifying the backups in the target account.

You should practice restores. You should be able to stand your infra back up from anywhere with an Internet connection.

Data protection account is a good idea, but if your main IT person is malicious before such an account gets implemented it won’t matter.

Trust but verify. Having a third party audit and provide findings (if you’re not technically capable as an owner) is cheaper than going out of business.

Reply on news.ycombinator.com