Услуга · Cloud services and hosting

S3 object storage

External storage solves two things at once: it takes heavy files off the application server and keeps backups outside your network. The second became critical once malware learned to hunt down and destroy archives first.

Off the network
copies out of reach
Protection
a ban on deletion
Invoice
for the volume used
Keys
with trimmed rights

What the work includes

The storage attaches to what already runs at your end: backup software, a site, an application.

Discuss the scope

Connection

We create the storage, issue keys and write the access rules.

Copies

Server and database archives travel there on a schedule with no human involvement.

Delete protection

A mode in which an object cannot be overwritten or erased until the set term expires.

Application files

Site images and documents move into storage, taking weight off the main server.

Separation of rights

Each system gets its own key with rights to exactly what it needs.

Savings

Rules: older data moves to a cheap storage tier or is deleted once its term runs out.

How it goes

Connection takes a couple of hours, while the first upload of large volumes depends on the width of your link.

01

Volume

We define what is stored, for how long and how quickly it has to come back.

02

Setup

Storage, keys, rights, retention term rules.

03

Integration

We connect it to backup software or directly to the application.

04

Check

We restore from the storage as a trial. Without that step the task cannot be considered closed.

An access key that can delete cancels out the whole defence. Backup software running under such a key lets malware wipe the archives along with the working data. The key must only be able to write, and the storage must hold objects for the set term.

Questions and answers

The usual scheme: daily copies for two weeks, weekly for a couple of months, monthly for a year. Keeping everything forever is pointless and expensive, so deletion rules are set on the same day as the upload.

It comes down to the link: a terabyte over a hundred-megabit line takes about a day. That is why critical systems keep two copies - a local one for a fast restore and an external one for when the local copy is unreachable.

On the Kazakh platforms we connect. This matters for more than speed: personal data inside the archives makes hosting abroad a direct breach of the requirements.

We will connect storage

Write what needs storing and in what volume. We will set up an upload with delete protection and test the restore.