We've found ourselves in a tough spot with our development company, and things aren't looking good. There are some billing disputes, and we're worried about potential malicious actions from their side. We have a small app running on AWS with 3 EBS Volumes, 3 EC2 Instances, 1 RDS Database, and 3 S3 Buckets. While we want to have a good resolution, I need to know how to protect our assets. Would it make sense to change their permissions or even delete them? But, they are still actively working on some features and bug fixes. As a complete beginner with AWS, I have a few questions: how can we backup everything? I read that backups have to remain on AWS, which doesn't really solve our issue. If we needed to switch to another development company, would these backups be useful? Am I approaching this the right way? Any help would be greatly appreciated!
4 Answers
Is there an AWS account manager assigned to you? If you have a support plan, reach out to them. If you're genuinely concerned enough to ask for advice here, consider investing in professional help to resolve this issue better.
I've been involved in similar situations before, and it all hinges on the permissions your dev team has in your account. If they have full admin rights, then your best move is to back everything up to another account. If their access is more limited, you might be able to create snapshots in your current account or tweak their permissions to block them from deleting important data. If your RDS and S3 amounts are manageable, you can export the database and directly download the contents from S3. For EBS and EC2, the cross-account backup is really your safest bet.
I suggest you take snapshots of all your resources and replicate that data to another AWS account that the dev team can't access. It's a straightforward way to ensure that even if they decide to do something malicious, you still have a secure backup of everything.
Honestly, I think you need to consult with a lawyer rather than relying solely on advice from tech folks here. This situation is serious, and getting legal guidance is crucial.
Related Questions
Cloudflare Origin SSL Certificate Setup Guide
How To Effectively Monetize A Site With Ads