Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've recently moved the images from my site to s3. I'm having nightmares about someone getting hold of the access keys, going in and deleting all my buckets.

Please share some s3 security tips and what to do in case of such a scenario ? (please don't say "keep your keys in a safe place").

When I had the images with my (regular) hosting company, I could rest knowing they keep daily snapshot backups so worst case I would ever lose is 1 day of data.

thanks in advance.

share|improve this question
If keep your keys safe is not possible/not a solution, then there's only one more: have additional backups. – Hubert Kario Oct 19 '10 at 20:39
up vote 0 down vote accepted

If you're really worried, some extra steps you could take are:

  • keep spare backups somewhere else, either a different amazon account (the worry is about access to the keys, not amazon's infrastructure failing, right?) or someplace entirely different like Rackspace's cloud... or both - and keep those keys closely-held.

  • change the keys often - IIRC you can tell amazon to revoke your past keys and give you new ones - this will keep any breach time-limited, at the cost of having to develop ways to quickly disseminate the new keys to those who do need to know.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.