S3 Object Lock for Immutable Backup
Protect your business from data loss with immutable storage that can be immediately deployed back into your production storage after a ransomware attack or accidental deletion or alteration.
What is Object Lock?
Creating a data storage air gap by physically removing your backups from the network (aka on site tape backup and hard drives) may seem like the safest way to protect your data, but it is hardly practical when you need to quickly restore your data in the event of a ransomware attack, equipment failure, human error or natural disaster.
Immutable storage with S3 Object Lock is the modern equivalent of the air gap. It creates a logical air gap through encryption and hashing, which makes data immutable to malicious efforts to encrypt or delete it. Immutable objects, locked individually by an application or as part of an overarching policy with Wasabi's immutable storage buckets, cannot be deleted or altered in any way, not even by a system administrator.
With Wasabi S3 Object Lock, your data is secure, offsite, and available at a moment’s notice should you need immediate access to your backups.
Why should you Use S3 Object Lock for immutable backups?
It is increasingly difficult to defend against bad actors, ensure the chain of custody and regulatory compliance of data, or prevent catastrophic data loss due to human error. Immutable storage enables you to make your data impervious to unauthorized or accidental revisions and deletion. Malicious actors cannot encrypt object-locked data and hold it for ransom.
In cases where you have multi-year retention requirements, you can set a fixed retention period to ensure those assets are securely protected for the duration of time required by governance or compliance requirements. Object Lock's immutable storage prevents unwanted revisions or deletions for all your stored data, for as long as you want to protect it, and is available to Wasabi customers at no additional cost.
Protect data from ransomware with immutable storage
Backups are a favorite target of cybercriminals because encrypting both your primary systems and backups increases the pressure to pay their ransom. Businesses of all stripes are vulnerable, especially hospitals, financial institutions, and universities. Wasabi’s S3 Object Lock and immutable storage features make it impossible for anyone to alter or delete your critical data stored in the Wasabi cloud. Creating an immutable backup file adds failsafe protection to your defense-in-depth approach to cybersecurity.
And, unlike our competitors, our immutable storage feature is free to our customers, with no additional API request charges or other hidden fees to recover data.
Learn how Wasabi customers mitigate the risk of ransomware attacks
Include Object Lock in your 3-2-1-1-0 backup strategy with Veeam + Wasabi
Veeam Backup & Replication enables you to store backups onsite for fast recovery and copy those backups to Wasabi’s immutable storage, giving you additional protection against malicious activity or accidental deletion at no additional cost.
Validated partner solutions supporting S3 Object Lock with immutable storage
S3 Object Lock FAQs
Object Lock is a data storage feature of Wasabi hot cloud storage wherein a user can designate certain objects to be immutable, meaning they cannot be altered or deleted by any application or user during a fixed date range defined by the user. Immutable storage is recommended as part of a ransomware and cybersecurity strategy that includes spreading data backups across multiple storage mediums, including an immutable backup copy of critical data, to avoid having a single point of failure within your system.
Immutable storage is a class of data storage which cannot be altered or deleted until the end of a set period of time. Data stored with Wasabi can be made immutable through Object Lock or if it is placed in an immutable bucket.
Object Lock enables customers to customize immutability and retention periods for each individual object, whereas all objects in an immutable bucket share the same immutability and retention settings. This granular control makes Object Lock an excellent fit for data that needs to be protected but may change over it’s lifetime, like backup data. Immutable storage buckets are ideal for long-term protection of data such as archives and primary data storage as well as an important element in a ransomware protection strategy.
With compliance mode, a protected file or object can’t be overwritten by any user or Wasabi engineer. When an object is locked in compliance mode, its retention date can’t be shortened and it will remain immutable until the end of their retention period. With governance mode, only users with special permission, such as the root user in the account can reduce the retention settings. This allows you to grant special permission to some users if necessary.
Immutable storage cannot be altered or deleted by anyone, including a Wasabi engineer. All immutable storage is created with a set retention period and at the end of this period the data stops being immutable. Once the files are no longer immutable they can be deleted.
There is no additional charge for using S3 Object Lock and immutable storage with Wasabi.