S3 Object Lock for Immutable Backup
Protect your business from data loss with immutable storage that can be immediately deployed back into your production storage after a ransomware attack or accidental deletion or alteration.
What is Object Lock?
Creating an air gap by physically removing your backups from the network (aka tape backup) may seem like the safest way to protect your data, but it is hardly practical when you need to quickly restore your data in the event of a ransomware attack or human error.
Immutable storage with S3 Object Lock is the modern equivalent of the air gap. It creates a logical air gap through encryption and hashing, which makes data immutable to malicious efforts to encrypt or delete it. Immutable objects, locked individually by an application or as part of an overarching policy with Wasabi's immutable storage buckets, cannot be deleted or altered in any way, not even by a system administrator.
With Wasabi S3 Object Lock, your data is secure, offsite, and available at a moment’s notice should you need immediate access to your backups.
Why should you Use S3 Object Lock for immutable backups?
It is increasingly difficult to defend against bad actors, ensure the chain of custody and regulatory compliance of data, or prevent catastrophic data loss due to human error. Immutable storage enables you to make your data impervious to unauthorized or accidental revisions and deletion. Malicious actors cannot encrypt object-locked data and hold it for ransom.
In cases where you have multi-year retention requirements, you can set a fixed retention period to ensure those assets are securely protected for the duration of time required by governance or compliance requirements. Object Lock's immutable storage prevents unwanted revisions or deletions for all your stored data, for as long as you want to protect it, and is available to Wasabi customers at no additional cost.
Ready to secure your data with Wasabi Hot Cloud Storage?
Protect data from ransomware with immutable storage
Backups are a favorite target of cybercriminals because encrypting both your primary systems and backups increases the pressure to pay their ransom. Wasabi’s S3 Object Lock and immutable storage features make it impossible for anyone to alter or delete your data stored in the Wasabi cloud. Creating an immutable backup adds failsafe protection to your defense-in-depth approach to cybersecurity.
And, unlike our competitors, our immutable storage feature is free to our customers, with no additional API request charges or other hidden fees to recover data.
Learn how Wasabi customers mitigate the risk of ransomware attacks
Include Object Lock in your 3-2-1-1-0 backup strategy with Veeam + Wasabi
Veeam Backup & Replication enables you to store backups onsite for fast recovery and copy those backups to Wasabi’s immutable storage, giving you additional protection against malicious activity or accidental deletion at no additional cost.
Validated partner solutions supporting S3 Object Lock with immutable storage
S3 Object Lock FAQs
Object Lock is a feature of Wasabi hot cloud storage wherein a user can designate certain objects to be immutable, meaning they cannot be altered or deleted by any application or user during a fixed retention period defined by the user. Immutable storage is recommended as part of a ransomware and cybersecurity strategy that includes creating an immutable backup copy of critical data.
Object Lock enables customers to customize immutability and retention periods for each individual object, whereas all objects in an immutable bucket share the same immutability and retention settings. This granular control makes Object Lock an excellent fit for data that needs to be protected but may change over it’s lifetime, like backup data. Immutable storage buckets are ideal for long-term protection of data such as archives and primary data storage.
With compliance mode, a protected file or object can’t be overwritten by any user or Wasabi engineer. When an object is locked in compliance mode, its retention date can’t be shortened and it will remain immutable until the end of their retention period. With governance mode, only users with special permission, such as the root user in the account can reduce the retention settings. This allows you to grant special permission to some users if necessary.
There is no additional charge for using S3 Object Lock and immutable storage with Wasabi.