AWS offers object locking, which is similar to a WORM drive (Write Once Read Man... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		grit-t on March 31, 2021 \| parent \| context \| favorite \| on: Whistleblower: Ubiquiti Breach “Catastrophic” AWS offers object locking, which is similar to a WORM drive (Write Once Read Many). This prevents logs from being deleted. The other approach is to ship logs to another AWS account. https://aws.amazon.com/blogs/storage/protecting-data-with-am...

neoncontrails on March 31, 2021 [–]

Thanks. I was a bit puzzled earlier why AWS was so insistent about enabling object locking, my specific use case doesn't profit from remote versioning at all. But I can see how this would mitigate log integrity concerns. I'll definitely enable it for that.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact