Is it possible to remove specific records from DynamoDB table backup?

Question

We are following single table design for DynamoDB and in one table we are storing user data and some other data. For GDPR reasons, it should be possible to allow the user to remove their data from the system.

If we enable scheduled backups for DynamoDB with AWS Backup service, is it possible to remove specific records from a generated backup?

Leeroy Hannigan · Accepted Answer

No backups are immutable for obvious reasons. However, have you considered using [PointInTimeRecovery](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/PointInTimeRecovery_Howitworks.html) (PITR). PITR allows you to keep a continuous backup for a period between 1 and 35 days. If you set the retention period to <30 days then you will be compliant with GDPR.

This of course assumes you don't require restoring data older than 30 days.

An alternative approach is to create your own backup mechanism using [ExportToS3](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/S3DataExport.HowItWorks.html). This will allow you to handle the data yourself, meaning its mutable and you can purge any data you like. Restoring can be done by calling ImportFromS3. Its not as fault tolerant to a managed solution like AWS Backup, but may be useful for your GDPR compliance.

Gary Mclean · Answer

Afraid selective data destrution from a Backup is not possible.

Is it possible to remove specific records from DynamoDB table backup?

Add your answer

Relevant content