Urgent.News

What's breaking now, across thousands of outlets.

Tech

We checked 53,709 production resources for backups. 61% had none.

Disclosure: I work at Eon, on the content side. Our team ran these assessments and this is our data. I didn't write the queries, but I sat with the engineer who did, and the methodology below includes what we couldn't see. Argue with it. Most backup tools produce a coverage report, and most of those reports work from tags. They check the resources a policy already enrolled, which is usually…

Eon's team conducted a comprehensive assessment of 53,709 production resources across 78 cloud environments on AWS, Google Cloud, and Azure. The results revealed that 61.2% of these production resources lacked any backup policy, recovery point, or native cloud snapshot. The study found that only 14% of AWS production resources carried a production tag, while 66% had no environment tag at all, and 19% had an environment tag containing something unrelated to the environment.

Intriguingly, of the 53,709 production resources, only 0.9% had a documented exclusion for skipping backups. The median age of a production resource without a recovery copy was 502 days, significantly older than the 363 days for those with backups in place. Interestingly, 55% of the unprotected resources were over 12 months old, indicating a resident population of resources left unprotected, rather than a backlog of newly created resources.

This issue highlights the limitations of relying solely on backup tools for coverage reports, as they often only account for resources tagged as production. The study emphasizes the importance of counting from the cloud side using live inventory from every account and region through read-only APIs to ensure comprehensive protection. Implementing documented exclusions and regularly reevaluating the coverage is crucial to maintaining robust backup processes and safeguarding against potential data loss.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Prevent toxic messages from freezing your pipeline: Retries and DLQ.

Evita que los mensajes tóxicos congelen tu pipeline: Reintentos y DLQ. Día 08 de la serie técnica WKafka Open Source. Un único JSON malformado jamás debería tumbar un consumidor de Kafka en…

  • WKafka isolates toxic messages in Dead Letter Queue (DLQ)
  • Exponential backoff prevents request storms during retries
  • Compatible with Python 3.9 to 3.14 with strict typing

No more messy f-strings: Type-safe fluent SQL for ClickHouse.

No more messy f-strings: Type-safe fluent SQL for ClickHouse. Day 08 of the WClickHouse Open-Source Engineering Series. Building dynamic analytical queries by stitching f-strings together is an…

  • Introduces QueryBuilder for type-safe, fluent SQL in ClickHouse
  • Chained API methods (table(), select(), etc.) build queries naturally
  • Automatic injection protection with escaped, validated parameters

Your Next.js API route is public—even if your UI isn’t.

Hiding a form behind a client-side condition doesn't make its API route private. Unless the route enforces its own checks, another client can call it directly. For a public contact form, you may not want to require an account. You still want the server to validate the request before it triggers an email or database write.

  • Public API routes in Next.js are accessible even if UI is not visible.
  • Unauthorized data submission possible via direct URL access.
  • FCaptcha provides server-side form verification solution.

More from Monday 28 September →