As a measure to mitigate against catastrophes such as a malicious entity gaining full access to our AWS account and deleting everything, I am in the process of setting up offsite backups for our production database. We use PostgreSQL on AWS RDS. We have daily backups enabled on RDS.
I came up with the two following options:
1) (daily) Download of the database snapshot generated by RDS (though I'm not sure if this is scriptable or even possible)
2) (daily) Spin up a read replica and use pg_dump on that replica to backup the database
What would be the best way to achieve this?
If that's any help we already have a tool that does daily backups of our s3 buckets.