Home / server / Questions / 1062989
In Process
Brian Sorrells
Asked: 2021-05-09 13:33:17 +0800 CST

AWS Glacier and Ransomware

  • 772

I'm trying to understand the structure of how AWS Glacier works because I have a problem.

Problem: I have a NAS that backs up to Glacier about once a week. About two weeks ago the NAS got infected with ransomeware so if I retrieved the data now I would just be obtaining useless encrypted files.

Question: Is it possible to download folders/data from a archive/inventory that occurred a few weeks ago as opposed to the latest inventory version?

Thanks for any help given.

amazon-s3 amazon-web-services aws-cli amazon-glacier ransomware

1 Answers

  1. Part of business continuity planning is to take and retain enough backups to meet restore objectives. You discovered that keeping backups for one week was not enough to protect against ransomware. Consider retaining backups longer. For example, keep weekly backups for four weeks.

    Glacier or S3 is object storage. You decide how to use it as a backup system: how many archives to store, and what controls to put in place to prevent early deletion or tampering.

    Check your vaults or buckets or whatever the storage container is called for older copies. If you do not have older backup archives, and automatic backup replaces the last good backup with a corrupt one, yes your backups are trashed.

    • 0