Skip to main content
CPEBuddy
Is Cloud Native Backup Enough? Air Gapping & Ransomware Resilience

Is Cloud Native Backup Enough? Air Gapping & Ransomware Resilience

Source: YouTube · Cloud Security Podcast · published Jan 8, 2026 · 42:13

Cloud Security
No ratings yet Log in to rate
Transcript Available
Description

AWS's 11-nines durability ensures data persistence but also makes accidental deletions permanent, highlighting that cloud-native features alone are insufficient for resilience 0:00.

Key Takeaways:
• Even with AWS native features, recovering from bulk deletions can take days or weeks, and root-level access compromises all protections 0:11.
• Traditional safeguards like versioning and snapshots are ineffective if an attacker has root-level access to the account 0:18.
• A "bunker account" strategy isolates backups, ensuring they remain safe regardless of incidents in other accounts 0:24.
• The discussion emerged from AWS Re:Invent 2025, focusing on the critical gaps in current cloud-native resilience strategies 0:31.

Understanding the limitations of native cloud durability is essential for designing truly resilient backup architectures.

Sources:

  • 0:00 AWS durability and the permanence of accidental deletions
  • 0:11 Limitations of native recovery features
  • 0:18 Ineffectiveness of versioning against root access
  • 0:24 Concept of isolated bunker accounts
  • 0:31 Context of AWS Re:Invent 2025 discussion

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

While AWS will do a great job 11 9 of durability, if you make an accidental deletion, that deletion is also 11 9 durable. What's gone is gone. >> If I was to do that with AWS native feature, even that would not have >> If you have a bucket with billions of objects, it's going to take you days, maybe weeks for you to recover. If I have root level access in that account, there's no versioning that can help you. There's no snapshot that can help you. Think of this being your bunker account. It is isolated. No matter what happens in any of your accounts, your backup is safe here. >> As with Amazon's largest conference for 2025, AWS reinvent and had a conversation about cloud native resilience. What does that mean? And is cloud native backup enough? Let me tell you, I didn't realize some of the…