Skip to content

Commit

Permalink
Update service-catalog/gcp-backup/README.md
Browse files Browse the repository at this point in the history
Co-authored-by: Jan David <jdno@jdno.dev>
  • Loading branch information
marcoieni and jdno authored Sep 25, 2024
1 parent 89405a1 commit 35909e8
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion service-catalog/gcp-backup/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ e.g. bucket replication to a different region and restricted access, our current
If a malicious actor was able to gain administrator access to the AWS account of one of the [infra-admins],
they could bypass a lot of safe guards and delete data.
2. _AWS Account deletion_. AWS could accidentally delete our account, resulting in the possible deletion of data and backups.
For example, something similar happened at [Google](https://arstechnica.com/gadgets/2024/05/google-cloud-accidentally-nukes-customer-account-causes-two-weeks-of-downtime/) recently.
Something similar happened to a customer on [GCP](https://arstechnica.com/gadgets/2024/05/google-cloud-accidentally-nukes-customer-account-causes-two-weeks-of-downtime/) in 2024.

- To mitigate threat 1, the new backup needs to have separate admin access.
- To mitigate threat 2, the new backup needs to be in a separate cloud environment.
Expand Down

0 comments on commit 35909e8

Please sign in to comment.