Wednesday, April 17, 2019

Re: [google-cloud-sql-discuss] Re: Cloud SQL external backups (postgres)

Yes, it's insane. And there are requests about if from years and years ago. There's a lot of possible solutions but it has to come from the Google platform. For example, either one of the options below would be a great improvement, preferably a combination of these:
  1. Make sure a phone confirmation is required for deletion of database and compute instances. For all I care this can be optional. At least give us the option for 2FA on such sensitive actions. 
  2. Give the user a option to store backups SEPERATE from the instance. So if the instance is deleted, we can still restore the data from a seperate backup.
  3. Make the delete a soft-delete and store it for 24 hours more. After 24 hours hard-delete it. This way a user can always restore a database or compute instance within 24 hours. 
If you go to a simple hosting solution they often ask you to type 'DELETE' or confirm a link in the e-mail, or whatever before they actually delete the server. Google just deletes it without warning, and it's unrestorable..

Op dinsdag 16 april 2019 20:41:35 UTC+2 schreef Dave Bettin:
Agree. This is absolute insanity.  What is the proper way to get this issue resolved?

On Tue, Apr 16, 2019 at 8:41 AM Marcel <vuijk...@gmail.com> wrote:
Good thing there is a request about it. I just don't understand how Google does not have this available yet. It's crazy, someone can hack into my account and they can delete my database. Backups are deleted as well so boom, my business is gone, non-restorable. I just don't get it.. I think most users don't know about this risk.

There should be a soft-delete first, only after confirm per e-mail or SMS code hard-delete. Or it should be restorable for at least 24 hours. Or it should be backupped to an external location. Even the cheapest hosting solution have better protection against all this than Google does..

Anyway, enough said. I will make sure that I backup it to an external cloud (not sure how yet, hope I can do this with the API by creating an export and later moving the export to Amazon storage bucket). 

Op dinsdag 16 april 2019 17:28:21 UTC+2 schreef yka...@google.com:
When an instance is deleted, the backups are deleted as well, which means you cannot restore it unless you manually did an export before deleting. If it helps, only users with Cloud SQL Admin role can delete an instance.

Otherwise, I have found an open feature request that covers your use case [3]. However there are not ETAs or guarantees for implementation.

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/5fe51c74-c3f1-45d2-a74b-92a58b6c5851%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/f7af0a94-6bc6-4d29-ad86-0bbf67226645%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment