AWS backup
- full managed data-protection service
- consolidate management into one place across accs & regions
- On-demand & scheduled based
- tag-based polices
- can create backup policies known as backup plans
- frequency (every 12 hours)
- window (what o’clock to start?)
- transition to cold storage
- retention period
- all backup to S3
- vault lock
- can enforce a WORM - backup can’t be deleted - even root users
