From the course: Complete Guide to AWS Security and Compliance Management

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Understanding data protection schemes

Understanding data protection schemes

- [Instructor] There are a variety of controls available to help improve the security and auditability of data you store in S3. One control to be aware of is bucket versioning. Suppose you have two employees, Miguel and Guadalupe, who both have access to the corporate-secrets bucket. As the name implies, it contains various files, including a particularly sensitive spreadsheet with details about upcoming merger and acquisition activity. Guadalupe updates the spreadsheet with some new information about the upcoming merger. Miguel also has an update, but it doesn't contain Guadalupe's update. Unfortunately, Guadalupe's changes are lost. You can prevent this situation by editing the bucket properties to enable bucket versioning. Now, when Guadalupe changes a file, it will be stored as a new version within S3. Similarly, if Miguel accidentally overwrites Guadalupe's file without her changes, that new version is stored as version three. In this situation, Miguel could retrieve version two,…

Contents