Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've recently moved the images from my site to s3. I'm having nightmares about someone getting hold of the access keys, going in and deleting all my buckets.

Please share some s3 security tips and what to do in case of such a scenario ? (please don't say "keep your keys in a safe place").

When I had the images with my (regular) hosting company, I could rest knowing they keep daily snapshot backups so worst case I would ever lose is 1 day of data.

thanks in advance.

share|improve this question
    
If keep your keys safe is not possible/not a solution, then there's only one more: have additional backups. –  Hubert Kario Oct 19 '10 at 20:39
add comment

1 Answer

up vote 0 down vote accepted

If you're really worried, some extra steps you could take are:

  • keep spare backups somewhere else, either a different amazon account (the worry is about access to the keys, not amazon's infrastructure failing, right?) or someplace entirely different like Rackspace's cloud... or both - and keep those keys closely-held.

  • change the keys often - IIRC you can tell amazon to revoke your past keys and give you new ones - this will keep any breach time-limited, at the cost of having to develop ways to quickly disseminate the new keys to those who do need to know.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.