amazon web services - I need to plan for disaster recovery for my AWS Account? -
i thinking if aws account deleted/inaccessible 1 fine day? (may sound weird). have implemented solution this? can have 1 aws account aws account?
there several things can do, 1 make sure have @ least 2 administrator accounts, 1 use, , 1 store away in safe place , use emergencies.
the second setup seperate aws account 'backup', own set of credentials. can grant cross-account access primary account, backup account allow primary account 'put' or backup objects backup account, if primary account compromised, attacker can't harm second account primary account.
the actual process backup services on 1 account going vary depending on services using, concept same - backup data s3 , copy data s3 in primary account s3 in backup account - , make sure primary account has enough access second account 'put' things, not delete. nobody in company should have access both of sets of credentials (assuming company not tiny).
you don't want company put out of business when there account compromised:
https://threatpost.com/hacker-puts-hosting-service-code-spaces-out-of-business/106761/
also, video, aws reinvent 2015 (starting around 50 minutes in), listen how airbnb protects against these issues in way:
AWS disaster recovery solutions is essential for data backup recovery of lost data from the system. This blog provide very good information on data recovery
ReplyDelete