Currently our system runs entirely inside AWS. We do rolling snapshots of our EBS and often practice running restores.
What keeps me up at night is having all our eggs in one basket. Here are the scenario's:
- Our Amazon zone has some massive event that destroys the data centre
- Someone gains access to our AWS account, terminates our instances and deletes all our snapshots
To mitigate these risks I'm thinking about moving snapshots periodically to another AWS account (with different credentials) in another region.
My question is this, is this an adequate level of precaution or should I be looking to offsite backups that are completely removed from Amazon?