Cross accounts backups

0

I have multiple AWS accounts (they're under Organizations) and I'd like to keep a backup of my data in a separate account. I saw that AWS Backup allows you to do this, but all accounts must be from the same Organizaiton. In this case, I wanted to backup to a separate account outside the Organization, because if someone gets access to my root/management account (accidentally or not), they can gain access to other accounts inside the Organization and delete my backups .

What other forms of backup besides AWS Backup are there? I know it has DLM or Lambda scripts however they would be hard to manage. Is there any way to do what I want?

natte
已提问 9 个月前259 查看次数
2 回答
0

Depending on what you are backing up you can use S3 and have the data replicated to another account that is locked down and outside of the organization.

https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-walkthrough-2.html

profile pictureAWS
专家
David
已回答 9 个月前
0

One possible option would be to use AWS DataSync to replicate data to the separate backup account. Schedule it to run automatically and handle encryption. Less centralized management than AWS Backup though.

However, having backup accounts outside the Org does add complexity. I'd try to evaluate the real risks - a malicious actor with root access could likely impact backups in many cases even across accounts. So focusing on prevention via IAM, MFA, monitoring etc may be a preferred approach vs complex cross-account backups.

profile pictureAWS
已回答 9 个月前
  • But can I use DataSync to replicate the data/backups that were made in AWS Backup to another account? Or does AWS Backup not allow this type of replica coming from DataSync? I would have to directly replicate my data, right?

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则