Object storage
S3 access policies: Designing least-privilege access
Most on-premises S3 deployments start with one access key per application and a policy granting full access to a bucket, because that is what gets the first ...
Author
Joshua Silvia
Object storage
Object storage integrity: How to verify migrated data
A migration completes, the copy tool reports no errors, and the source is scheduled for decommissioning. That report describes what the tool attempted and what ...
Object storage
S3 multipart uploads: Finding unfinished upload costs
A bucket listing shows completed objects. It does not show the parts of multipart uploads that were started and never finished, and those parts consume ...
Object storage
S3 lifecycle policies: Testing before deleting data
A lifecycle policy is a small piece of configuration that deletes data continuously, without confirmation, and without any human involvement after the moment ...
Object storage
S3 versioning costs: Where hidden capacity goes
Versioning is one of the most useful features in object storage and one of the most common causes of capacity that nobody can account for. The mechanism is ...
Object storage
Object storage rebuilds: What affects recovery time?
Every storage system tolerates a defined number of simultaneous failures. What matters operationally is how long it spends at reduced protection after one ...
Object storage
S3 request performance: Why throughput is not enough
Object storage is usually specified in gigabytes per second, which suits the workloads it was first adopted for. Backup streams and media archives move large ...
Cyber resilience
Backup anomaly detection: Which storage signals matter?
Backup infrastructure sees the whole estate every night, which makes it an unusually good vantage point for noticing that something has changed. Most ...
Cyber resilience
Backup retention changes: Preventing silent exposure
Deleting a backup is an event. Shortening a retention policy is a settings change, and it produces the same outcome more quietly: copies expire on their new ...
Cyber resilience
Ransomware recovery exercises: What to measure
Most organizations run some form of recovery exercise, and most produce a report that says it went well, with a list of observations and a note to repeat next ...