‹ BackHN Continuity

Thread

AWS says it can't restore some data from mideast facilities struck by Iran

530 points · 452 comments · berkeleyjunk

  1. Art9681 · · focus · HN ↗
    No disaster recovery plan? No offsite backups? Someone failed to applied the most basic principles that have existed for decades.
    1. nixass · · focus · HN ↗
      Offsite to.. where? Sea? Data residency in Gulf states is very strict and basically nothing is leaving the countries
      1. firesteelrain · · focus · HN ↗
        Typically 300 miles geographically but could be hard in some Gulf States
        1. XorNot · · focus · HN ↗
          In a Gulf State 300 miles is still within ballistic missile range and any belligerent is going to target both places if at all.

          Strictly speaking from a missile defense perspective there's an argument 2 sites are a waste of valuable interceptors.

          1. tgsovlerkhgsel · · focus · HN ↗
            They're likely going to target two datacenters, not the datacenters + your medium sized company's office NAS and the safe in the office manager's home.

            (Encryption handles confidentiality concerns.)

            1. niij · · focus · HN ↗
              > (Encryption handles confidentiality concerns.)

              Which is why data residency is such a stupid concept.

              1. firesteelrain · · focus · HN ↗
                Yes and no. For example if you are doing Azure, technically Azure can see tenant traffic I believe and you need to use both a Platform Key and CMK for data rest. VMs need encryption at host turned on too.

                There is nothing to say that a determined adversary may still get at your data so it needs to stay in country.

                1. jamesfinlayson · · focus · HN ↗
                  Yeah same with AWS - they say they can't see my custom KMS key but... this stuff all lives on their servers, not on my servers. AWS definitely have the ability to see my KMS keys and decrypt my data but I assume that they won't unless a judge tells them to.
                  1. schwank · · focus · HN ↗

                    [dead]

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.