Test Immutability

[Qaesar]

Hi there

I'm a begginer to Veeam B&R and i loved this Immutability function (like everyone i think ^^).

So, i set up an AWS Object Locked bucket by following some tutorials online and now i just wanted to make SURE it's setup correctly and i now can sleep on my two ears

I tried to delete a file to put to the test this immutability thing and... It worked :/

I thought that would be impossible ? That's the purpose of this function, or do i miss something ?

Anyway, could anyone be so kind to guide me through a verification of the settings please ?

Very thank you ^^

[Andreas Neufert]

AWS has implemented object lock by versioning.
When you delete objects that are immutable on the object storage there will be 2 versions then (the original one and the deleted one).

Can you please share how you deleted the data?

[Qaesar]

Sure, i logged into my AWS console, navigated to some sub-directory file, selected it and pressed the delete button

[dalbertson]

While you "deleted" it and you cant see it in the console, the data is still there. When you delete versioned data from S3 it doesnt actually delete it. It puts a delete marker on the data and hides it in the browser. But you can still get the data back in the console by removing the delete marker from each object.

Here is an explanation of delete markers.

https://docs.aws.amazon.com/AmazonS3/la ... sions.html

[Qaesar]

Thank you ! ^^

So, if i understand correctly, even if Veeam or AWS is compromised and could mark backups as deleted, i just have to tick "List versions" and i could then recover my deleted files ?

[Andreas Neufert]

Differently, you do not have to do anything as we know which version our data is and just request them, ignoring the fact they have delete markers.

[Qaesar]

Hooo i see, that's pretty incredible huhu, thank you very much ^^