Herion and welcome back now in today's We Do will be discussing about the history of Dick Clark.
Now, before we go in and understand about that feature, it is important that we understand about the
concept of war so long basically stands for right once very many.
And it basically describes a data storage device in which the information, once it is done, cannot
be modified.
So, for example, a user has written some data.
Let's assume that this is a very critical data and it is stored in a storage system.
So with the help of one model, it is assured that when a user, even when he has a right set of permission,
tries to modify or delete this data from the storage system, that operation will be denied.
So this right protection affords the assurance that the data cannot be tampered with once it is returned
to the device, both with the genuine users as well as the attacker.
Now, the question that comes is why do you need such a model?
Let's understand it now.
We understand this with a use case of ransomware.
This is very common nowadays.
So ransomware basically had also referred as a black male Trojans.
So what they basically do is they go ahead and encrypt all of your files, which are part of your system,
and that encryption is stored at the attackers system.
So all of your data, one third system is infected, all of your data is encrypted, and essentially
it is considered as lost unless and until you get the decryption key from the attacker.
And how will you get the decryption given the attacker after you pay that attacker?
Now, many of the attackers, they have on millions in revenue after they have infected some of the
critical components of the organization and organization.
If they do not really have a right backup strategy, they have no option other than to pay.
If they do not pay, then the data is unrecoverable.
So that is what the ransomware is all about.
I still remember many years back we used to play around with this ransomware as part of our organizational
security strategy.
So we used to have a virtual machine.
We used to intentionally infect our virtual machine with the ransomware.
And then we used to also have detection tools which could immediately, within a minute used to tell
us that all of our files are getting modified.
So there is a chance that there is a ransomware that is installed within a system.
And how quickly do we get the email notification about this?
So all of this testing is something that we used to do.
In fact, this is a very interesting software, if you want to try out practically.
But again, cautions in case if this gets leaked, then your computer can also be infected.
But this is what the ransomware is all about.
And one of the ways in which you can prevent some of the critical data organization going against the
ransomware attack is by using the right tools, that many model.
So in A.W. It, with the help of a feature called Object Lock, it supports the right one sided many
more.
So with this you can use it to prevent an object from being deleted or retained for a fixed amount of
time or indefinitely.
Now, one important part to remember is that when you go ahead and enable object lock, there are two
detention modes that will have to go through force.
One is the governance mode and second one is the compliance.
More so when you deployed in governance.
More agents account with specific information are able to remove object locks from the objects.
So by default, say you associate object lock with a specific object.
It needs to know none of the users will be able to go ahead and remove the object lock except some specific
user that you have configured within your AIM policies.
So this is what the governance mode is all about.
You also have a compliance mode.
In this mode, the protection cannot be removed by any user, including the Robuchon.
So ideally what you might want is you might want to have a compliance mode for the extremely critical
data.
However, a lot of organizations are also using the governance model.
Now, again, there is a risk with the governance more that if the Access Guiora username gets leaked,
then essentially a through that account will be able to remove the object log there.
But again, if you have a right set of multifactor authentication and this is also something that is
a little different.
So with this basic let's go ahead and try it out.
So currently within the restrictions.
So let's go ahead and quickly create a bucket, the name of the bucket, let's call it, as my key players
have an object lock and within a year under the advanced settings, let's go ahead and enable the object
lock here.
Now, as soon as you enable the object lock, it basically gives you a warning message that object lock
can prevent objects from being deleted to have a data integrated we have already.
Discuss about it, and we are fine with it for our demo, so we'll collect it and we'll create a bucket
again, one important part to note is that Object Log only works with the words in the bucket.
So if you go out and enable it automatically, the burgeoning feature is enabled as part of your history.
Great.
So we have our bucket available now within the bucket.
If you will quickly go to the properties here and within, the first thing you'll see is the bucket
worsening is enabled.
And if will go back down, you'll also see the object Ludwin enabled.
This is great.
So now let's go ahead and try it on.
Now, what we can do is the objects that we upload as part of the S3.
We can associate a specific retention mode for each and every individual object.
So this is really great.
So let's go in and try things out.
So within the bucket list, upload some data, highlight file.
Now, for today's purpose, I have to sample text files zero one and zero to the extent that we will
be uploading.
Let's upload it.
Great.
So now we have to files.
What will go ahead and do will go add an associate object log with that.
So the first five zero one load will be associating a governance mode with that.
So let me go ahead and select this file.
If I go a bit down, you have the object log retention.
Let's edit this and for the retention will go ahead and enable it.
And as soon as we enable it, it is giving us two more governance, more and compliance more.
So what we'll be doing for the first object will be using the governance model and for reading and let
it let's give a date here.
Let me just give a date of tomorrow.
And one great thing.
It also shows you that it is one day from today.
This is fine.
I'll go ahead and see the change.
Perfect.
So this is zero and 30.
Let's do the zero 2.0 as well.
However, for you, should we be associating a compliance module so will enable it will set the compliance
more and again, retain and let's set it for tomorrow, which is one day from today.
Let's go back to the budget now, as you're discussing for the governance more, you can go ahead and
also remove it and then maybe delete the object for compliance mode.
You do not really have that option.
So let's try it.
Or so far, zero one.
Let's say we want to remove the governance more.
Now, we have started only for one organization might Mazatec for 365 days and even a few years.
So it is important that maybe at a later stage, if they change their mind, they should be able to
modify their settings.
So the object like retention.
Let's quickly edit it up and let's disable the retention altogether.
Alright, so we have disable the retention here and now in case if you want to go ahead and delete the
object, you can do it.
Alright, so let's try it out.
So at this stage you can delete the object.
Now since the versioning is enabled it will go ahead and associated deletion marker.
So for zero one you have a deletion marker.
In fact let's go ahead and delete it.
This time it will be a permanent delete
and it is successful.
And even if you do so, all versions you see zero under text is removed now for the zero to 60 that
is following the compliance mode.
Let's try it out now.
Let's do a permanent delete here.
And immediately you see you get the error stating access denied.
So currently you see you will not be able to delete this specific object.
That's great.
So I hope with this you understood the basics of our dialogue and also the real world scenarios where
such types of features would be required.
And with this will conclude today's video.