I am using the excellent s3 tools (http://s3tools.org/s3cmd) to backup files from a Linux based server to S3.
Does anyone know of a good strategy so that I can use this tool to upload o S3 in a way so that if my server was unknowingly and completely compromised, my S3 backups would still not be delete-able?
One requirement is that the backups are non-interactive. My problem is that the .s3cfg file that is saved has the secret access key, which gives an attacker full access to S3.
As far as I can tell, the only way to accomplish this would be if I could upload to S3 authenticated by a write-only (and with no permission to delete) set of credentials, which doesn’t seem to be an option.
Perhaps I am missing something?