Safeguards
S3 Object Lock
What is S3 Object Lock?
S3 Object Lock is a deletion lock for object storage: a stored file cannot be changed or deleted until a set date, not even with admin rights. For backups it means a copy an attacker cannot destroy.
In ransomware attacks the backups are found and deleted first. With Object Lock that step fails, even if the backup system's credentials were stolen.
The name comes from Amazon S3; many S3-compatible providers offer it today, including data centres in Austria and the EU. In compliance mode not even the provider can lift the lock early.
Object Lock does not replace a backup strategy. It is the last copy in a 3-2-1 setup, next to fast local snapshots, and the retention period has to fit the recovery plan.
All terms in the knowledge base
Legal notice: We are engineers, not lawyers: we cannot and will not make any statements on legal questions. This entry is purely technical, reflects the state of knowledge to the best of our understanding, and is not legal advice; it does not replace review by a qualified lawyer. No guarantee is given as to correctness or completeness; liability arising from the use of this information is excluded to the extent permitted by law. What counts is always the version currently in force at the responsible body, for example dsb.gv.at, nis.gv.at or enisa.europa.eu. AI transparency: parts of this entry may have been created with AI assistance, so errors are possible despite review: please report errors here · how we create content.
From the term to practice
Where does your business actually stand?
The IT Check reviews your IT across 8 audit areas with more than 100 individual checks and delivers documented findings with a prioritised action plan. From 1,299 € excl. VAT.
office [at] vetosec [dot] at · vetosec.at/contact/
