Configuring Immutable Storage with Object Storage Repository

Configuring Immutable Storage with Object Storage Repository

KB ID: 190027
Objective:
This KB article provides step-by-step guidance on configuring an Object Storage Repository as Immutable Storage in Amazon S3 and S3-compatible clouds. This involves enabling Object Locking and implementing the required IAM User Policy.
Amazon S3:
1. Enable Object Locking in the Bucket:
Access the AWS Management Console and navigate to the S3 service.
  1. Choose the desired bucket for Immutable Storage configuration.
  2. Navigate to the "Management" tab.
  3. Under "Object lock," click "Edit."
  4. Enable "Object Lock" and save the changes.
2. Remove Default Retention Settings (if any):
While configuring Object Locking, ensure no default retention settings are applied to the bucket, allowing objects to be classified as immutable without predefined retention periods.
3. Implement IAM User Policy:
  1. Create an IAM User Policy with necessary permissions to designate the bucket as Immutable Storage.
  2. Access the IAM console in the AWS Management Console.
  3. Navigate to "Policies" and click "Create Policy."
  4. Select the "JSON" tab and utilize the provided template
    1. JSON policy Template
  5. Review and save the policy.
4. Attach the Policy to IAM User:
In the IAM console, navigate to the "Users" section.
  1. Select the IAM user responsible for configuring Immutable Storage.
  2. Access the "Permissions" tab and click "Attach Policies."
  3. Search and attach the previously created IAM User Policy.
S3 Compatible Clouds:
Immutable cloud storage solutions such as Wasabi and MinIO are supported in BDRSuite. For other S3-compatible clouds, follow similar steps.
1. Enable Object Locking in the Bucket.
2. Remove Default Retention Settings (if any).
3. Implement IAM User Policy.
4. Attach the Policy to IAM User.
Conclusion:
Following these outlined steps facilitates the configuration of an Object Storage Repository as Immutable Storage in Amazon S3 and S3-compatible clouds. Enabling Object Locking and enforcing the necessary IAM User Policy enhances the security and compliance of your S3 bucket, ensuring immutability for specified objects.

    • Related Articles

    • Configuring Object Storage Repository as Immutable Storage

      KB ID: 190026 Overview: Configuring an Object Storage Repository as Immutable Storage requires specific permissions to be granted. This article delineates the essential permissions and presents the JSON format of an IAM user policy necessary for ...
    • Configuring PostgreSQL Database Backups

      Configuring PostgreSQL Database Backup ensures robust protection for your PostgreSQL databases, safeguarding critical data and maintaining business continuity. With customizable backup schedules, retention policies, and flexible recovery options, ...
    • Configuring MySQL Database Backup

      Configuring MySQL Database Backup provides a reliable solution for protecting your MySQL databases, ensuring the safety of critical data and uninterrupted operations. With customizable backup schedules, retention policies, and flexible recovery ...
    • Configuring Proxmox Backup

      Configuring Proxmox VE Backup offers a reliable solution for protecting your virtual machines and containers on Proxmox Virtual Environment. With customizable backup schedules, retention policies, and flexible recovery options, this process ensures ...
    • Configuring KVM Backup

      Configuring KVM Backup ensures reliable protection for your virtual machines running on Kernel-based Virtual Machines (KVM). With customizable backup schedules, retention policies, and flexible recovery options, this process secures your virtualized ...