Security Advanced SECURITY-381 · 17 min

A snapshot policy copies encrypted data correctly

The backup exists, but the recovery ceremony cannot finish. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.

Pro

시나리오

The backup exists, but the recovery ceremony cannot finish. The service still works through …

구독하면 이어서 볼 수 있어요

이 문제의 전체 시나리오와 점검 체크리스트, 복구 순서, 모범 풀이는 Pro 구독에서 열립니다.

구독 안내 보기

다음으로 이어서 보기 좋은 문제

내 풀이

저장됨

1 · 원인 분석 2 · 복구 방안 3 · 재발 방지

풀이 기록·힌트·북마크는 로그인하면 계정에 저장되어 웹·앱에서 이어집니다.

A snapshot policy copies encrypted data correctly

A backup snapshot restores while the copy role still lacks the right to re-encrypt in the target account during a failover rehearsal

S3 encryption enforcement is enabled, but a legacy multipart client omits the required KMS context and uploads start failing midstream

A new KMS grant allows the backup role to decrypt snapshots, but the grant was created in one region and cross-region restore still fails

A backup or snapshot path is readable while cross-account or cross-region recovery still lacks the exact decrypt or restore permission it needs during a failover rehearsal