--- title: "Hack Day: Beyond the Snapshot - Our Deep Dive into AWS Backup for Advanced Disaster Recovery" description: Explore advanced AWS Backup features and modern backup strategies for disaster recovery (DR) and business continuity (BCP) from our latest HackDay. image: https://blog.base2services.com/hubfs/Blog%20Images%20(Teal)-600-350px.png --- [![base2Services - The Cloud Services People](https://www.base2services.com/images/base2.svg)](https://www.base2services.com/) - [Solutions](https://www.base2services.com/services/) - Get Started Here - [KickOff](https://www.base2services.com/products/kickoff/) - [Secure Compass](https://www.base2services.com/products/securecompass/) - [Focused AWS Review](https://www.base2services.com/consulting/services/discovery-and-review/) - Managed Services - [Cloud Management](https://www.base2services.com/cloudmanagement/) - [Platform Engineering](https://www.base2services.com/platform-engineering/) - [Compliance & Risk](https://www.base2services.com/security/) - Bundled Engagement - [DevOps as a Service](https://www.base2services.com/devops/) - Specialist Engagements - [Migration](https://www.base2services.com/consulting/services/cloud-migration/) - [AI Factory](https://www.base2services.com/artificialintelligence/aifactory/) - [Generative AI](https://www.base2services.com/artificialintelligence/generativeai/) - [SaaS CTO](https://www.base2services.com/consulting/services/saas-cto/) - [Industries](https://www.base2services.com/industries/) - [SaaS & ISVs](https://www.base2services.com/industries/saas-and-isvs/) - [Financial Services](https://www.base2services.com/industries/financial-services/) - [Healthcare & Life Sciences](https://www.base2services.com/industries/healthcare-and-life-sciences/) - [Government & Enterprise](https://www.base2services.com/industries/government-and-enterprise/) - [Media](https://www.base2services.com/industries/media/) - [Education](https://www.base2services.com/industries/education/) - [AWS Advanced Partner](https://www.base2services.com/partners/partner-pages/aws.html) - [AWS DevOps Competency](https://www.base2services.com/partners/partner-pages/aws.html) - [AWS SaaS Competency](https://www.base2services.com/aws-saas-solutions/index.html) - [Enablement Tools](https://www.base2services.com/partners/) - [Explore](https://www.base2services.com/community/) - [Blog](https://blog.base2services.com) - [Videos](https://www.base2services.com/community/videos/) - Toolkit - [Cloud Monitoring](https://www.base2services.com/products/cloud-monitoring-aws/) - [Start/Stop](https://www.base2services.com/products/start-stop-aws/) - [Safe Test Data](https://www.base2services.com/products/safe-test-data/) - [App Configuration](https://www.base2services.com/products/application-config/) - [Secure Access](https://www.base2services.com/products/secure-access-aws/) - [Ask about AWS](https://www.base2services.com/products/ai-access-aws/) - [Resource Documenter](https://www.base2services.com/products/resource-documenter/) - [Talk to Us](https://www.base2services.com/contact/) - [About](https://www.base2services.com/about/) - [About Us](https://www.base2services.com/about/) - [Why Choose Us](https://www.base2services.com/how-we-work/why-choose-us/) - [How We Work](https://www.base2services.com/how-we-work/) - [Case Studies](https://www.base2services.com/customers/) - [Solutions](https://www.base2services.com/services/) ##### Get Started Here - [KickOff](https://www.base2services.com/products/kickoff/) - [Secure Compass](https://www.base2services.com/products/securecompass/) - [Focused AWS Review](https://www.base2services.com/consulting/services/discovery-and-review/) ##### Managed Services - [Cloud Management](https://www.base2services.com/cloudmanagement/) - [Platform Engineering](https://www.base2services.com/platform-engineering/) - [Compliance & Risk](https://www.base2services.com/security/) ##### Bundled Engagement - [DevOps as a Service](https://www.base2services.com/devops/) ##### Specialist Engagements - [Migration](https://www.base2services.com/consulting/services/cloud-migration/) - [AI Factory](https://www.base2services.com/artificialintelligence/aifactory/) - [Generative AI](https://www.base2services.com/artificialintelligence/generativeai/) - [SaaS CTO](https://www.base2services.com/consulting/services/saas-cto/) - [Industries](https://www.base2services.com/industries/) - [SaaS & ISVs](https://www.base2services.com/industries/saas-and-isvs/) - [Financial Services](https://www.base2services.com/industries/financial-services/) - [Healthcare & Life Sciences](https://www.base2services.com/industries/healthcare-and-life-sciences/) - [Government & Enterprise](https://www.base2services.com/industries/government-and-enterprise/) - [Media](https://www.base2services.com/industries/media/) - [Education](https://www.base2services.com/industries/education/) - More - [AWS Advanced Partner](https://www.base2services.com/partners/partner-pages/aws.html) - [Explore](https://www.base2services.com/community/) - [About Us](https://www.base2services.com/about/) - [Case Studies](https://www.base2services.com/customers/) - [AWS Advanced Partner](https://www.base2services.com/partners/partner-pages/aws.html) - [AWS DevOps Competency](https://www.base2services.com/partners/partner-pages/aws.html) - [AWS SaaS Competency](https://www.base2services.com/aws-saas-solutions/index.html) - [Amazon Foundational Technical Review](https://www.base2services.com/consulting/amazon-foundational-technical-review-ftr/index.html) - [Other partners](https://www.base2services.com/partners/) - [Explore](https://www.base2services.com/community/) - [Blog](https://blog.base2services.com) - [Videos](https://www.base2services.com/community/videos/) - Toolkit - [Cloud Monitoring](https://www.base2services.com/products/cloud-monitoring-aws/) - [Start/Stop](https://www.base2services.com/products/start-stop-aws/) - [Safe Test Data](https://www.base2services.com/products/safe-test-data/) - [App Configuration](https://www.base2services.com/products/application-config/) - [Secure Access](https://www.base2services.com/products/secure-access-aws/) - [Ask about AWS](https://www.base2services.com/products/ai-access-aws/) - [Resource Documenter](https://www.base2services.com/products/resource-documenter/) - [About](https://www.base2services.com/about/) - [About Us](https://www.base2services.com/about/) - [Why Choose Us](https://www.base2services.com/how-we-work/why-choose-us/) - [How We Work](https://www.base2services.com/how-we-work/) - [Case Studies](https://www.base2services.com/customers/) - - [Search](https://www.base2services.com/search.html) - [Talk to Us](https://www.base2services.com/contact/) [1300 713 559](tel:1300713559) [646 586 9485](tel:3474670942) [← Blogs](https://blog.base2services.com/) [Security](https://blog.base2services.com/tag/security) [AWS](https://blog.base2services.com/tag/aws) # Hack Day: Beyond the Snapshot - Our Deep Dive into AWS Backup for Advanced Disaster Recovery ![Jared Brook](https://blog.base2services.com/hs-fs/hubfs/Headshots/jared@2x.jpg?width=100) Jared Brook · 3 Minute Read Share [in](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fblog.base2services.com%2Fhackday-our-deep-dive-into-aws-backup-for-advanced-disaster-recovery) [X](https://twitter.com/intent/tweet?url=https%3A%2F%2Fblog.base2services.com%2Fhackday-our-deep-dive-into-aws-backup-for-advanced-disaster-recovery&text=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EHack+Day%3A+Beyond+the+Snapshot+-+Our+Deep+Dive+into+AWS+Backup+for+Advanced+Disaster+Recovery%3C%2Fspan%3E) [f](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fblog.base2services.com%2Fhackday-our-deep-dive-into-aws-backup-for-advanced-disaster-recovery) [↗](mailto:?subject=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EHack+Day%3A+Beyond+the+Snapshot+-+Our+Deep+Dive+into+AWS+Backup+for+Advanced+Disaster+Recovery%3C%2Fspan%3E&body=https%3A%2F%2Fblog.base2services.com%2Fhackday-our-deep-dive-into-aws-backup-for-advanced-disaster-recovery) At base2Services, we live and breathe cloud infrastructure, but even we know how crucial it is to step back from daily operations every now and then and dive deep into the tools we use every day. That's exactly what we did for our latest Hack Day: a focused research session on AWS Backup. Our goal was twofold: to better understand its current features and limitations, and to explore how we can leverage the service to solve our customers' most complex Disaster Recovery (DR) and Business Continuity Planning (BCP) requirements. ## Putting Features to the Test: EBS Item-Level Restoration You can read all the documentation you want, but there's no substitute for hands-on testing. We decided to try out some of the more advanced features we're not currently using in all customer environments, focusing on one in particular: EBS item-level restoration. In a typical DR scenario, restoring an entire EBS volume from a snapshot is the standard, but it can be slow and costly if you only need a single file or directory. The item-level restore feature promised a more granular, efficient solution. Our test process was straightforward: 1. **Take an EBS Snapshot:** We started by snapshotting a running EBS volume containing a sample file system. 2. **Create a Search Index:** We then used AWS Backup's capabilities to create a search index for all the individual files on that snapshot. 3. **Perform Item-Level Restoration:** With the index in place, we could search for and restore specific files or directories directly from the snapshot (without launching a new volume) and place them in an S3 bucket. Our key takeaway? This is a game-changer for operational recovery. It gives us the ability to recover individual files for a user quickly and efficiently, dramatically reducing the Recovery Time Objective (RTO) for common "Oops, I deleted that" scenarios. ## From Backups to Bunkers: Rethinking the DR Strategy Our hands-on testing and deep-dive exploration led to a wider discussion about comprehensive DR/BCP strategies, inspired by some recent industry talks on the topic. We undertook a detailed technical review of AWS Backup, explored console scenarios, and debated implementation paths as we reflected on our existing "databunker" solution and how a modern backup strategy isn't one-size-fits-all. Instead, it must be layered to address different types of threats. We broke it down into three distinct backup models: 1. **Operational Backups** The Problem: Accidental deletion, data corruption, or minor operational errors. The Solution: This is what most people think of as "backups." They are frequent (e.g., daily snapshots or point-in-time recovery points) with a short-term retention policy. The EBS item-level restore we tested is a perfect tool for this, allowing for fast, granular recovery with minimal disruption. 2. **Disaster Recovery (DR) Backups** The Problem: A site-level or regional disaster (e.g., a data centre flood, fire, or large-scale AWS outage). The Solution: This is about business continuity. These backups must be automatically replicated to a separate, geographically distant AWS region. The key here is not just data availability but the orchestration to bring services back online in that new region. This involves testing, automation (like AWS CloudFormation), and clear RPO/RTO targets. 3. **Cyber Attack / Ransomware "Databunker" Backups** The Problem: A malicious actor gains access to your environment and actively tries to destroy or encrypt your data and your backups. The Solution: This is the "databunker" concept. These backups must be protected from your own systems. The key principles are: - Immutability: Using features like AWS Backup Vault Lock (WORM - Write-Once-Read-Many) to ensure that once a backup is written, it cannot be deleted or altered, even by a root admin, for a set retention period. - Logical Air-Gapping: Storing these critical backups in a completely separate, "databunker" AWS account with highly restricted, break-glass-only access. - Least Privilege: Ensuring that the credentials used for daily operations do not have permission to delete or modify these long-term, immutable backups. ## What We Learned We not only validated powerful features like EBS item-level restore but also solidified our strategic approach to modern data protection. AWS Backup has evolved from a simple snapshot scheduler into a robust, centralized platform that can and should be the cornerstone of a multi-layered DR strategy. By combining its features with a clear understanding of operational, DR, and cyber-threat models, we can design solutions for our customers that are not just resilient but truly hardened against the worst-case scenarios. [Contact us](https://www.base2services.com/contact/)today to discuss how you can recover from disaster quickly and ensure continuity for your business. #### Stay in the loop ### DevOps & AI insights, straight to your inbox Our best content, services and events. Roughly every second month. ### Keep reading #### [devops Security · Tech · AI AI Tools Are Entering Your Business Faster Than Anyone Can Vet Them](https://blog.base2services.com/ai-tools-are-entering-your-business-faster-than-anyone-can-vet-them) #### [devops Security · Automation · AI Teaching AI Systems to Respect the Edges with Guardrails, Accuracy & Privacy](https://blog.base2services.com/teaching-ai-systems-to-respect-the-edges-with-guardrails-accuracy-privacy) #### [devops Security · Compliance · News ISO/IEC 27001:2022 Renewed - Security That Keeps Pace](https://blog.base2services.com/iso/iec-270012022-renewed-security-that-keeps-pace) #### [devops SaaS · Security · AI Capitalizing on Australia's AI Strategy](https://blog.base2services.com/capitalizing-on-australias-ai-strategy) ## Send an enquiry Tell us about your environment, a project in flight or a problem you are trying to solve. - For regulated, SaaS and product teams on AWS - No pitch deck, a practical conversation first Or book a time that suits you [Book a 30-minute chat](https://info.base2services.com/meetings/m-shelton/contact-us) [![base2Services](https://www.base2services.com/images/base2_white.svg)](https://www.base2services.com/) base2Services is an ISO 27001:2022 certified AWS managed services partner, running platform engineering, cloud operations, AI operations and compliance for SaaS companies, ISVs and regulated software teams since 2005. ### Get Started Here - [KickOff](https://www.base2services.com/products/kickoff/) - [Secure Compass](https://www.base2services.com/products/securecompass/) - [Focused AWS Review](https://www.base2services.com/consulting/services/discovery-and-review/) ### Managed Services - [Cloud Management](https://www.base2services.com/cloudmanagement/) - [Platform Engineering](https://www.base2services.com/platform-engineering/) - [Compliance & Risk](https://www.base2services.com/security/) - [DevOps as a Service](https://www.base2services.com/devops/) ### Specialist Engagements - [Migration](https://www.base2services.com/consulting/services/cloud-migration/) - [AI Factory](https://www.base2services.com/artificialintelligence/aifactory/) - [Generative AI](https://www.base2services.com/artificialintelligence/generativeai/) - [SaaS CTO](https://www.base2services.com/consulting/services/saas-cto/) ### Toolkit - [Cloud Monitoring](https://www.base2services.com/products/cloud-monitoring-aws/) - [Start/Stop](https://www.base2services.com/products/start-stop-aws/) - [Safe Test Data](https://www.base2services.com/products/safe-test-data/) - [App Configuration](https://www.base2services.com/products/application-config/) - [Secure Access](https://www.base2services.com/products/secure-access-aws/) - [Ask about AWS](https://www.base2services.com/products/ai-access-aws/) - [Resource Documenter](https://www.base2services.com/products/resource-documenter/) ### Company - [About Us](https://www.base2services.com/about/) - [Customers](https://www.base2services.com/customers/) - [How We Work](https://www.base2services.com/how-we-work/) - [Why Choose Us](https://www.base2services.com/how-we-work/why-choose-us/) - [Explore](https://www.base2services.com/community/) - [Blog](https://blog.base2services.com/) - [Videos](https://www.base2services.com/community/videos/) ![ISO 27001 Certified](https://www.base2services.com/images/ISO-27001-certified_white.svg) [![JASANZ Certified](https://www.base2services.com/images/jasanz.svg)](https://register.jas-anz.org/certified-organisations) © base2Services | [Terms & Conditions](https://www.base2services.com/community/terms.html) | [Privacy](https://www.base2services.com/community/privacy.html) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jared Brook", "url" : "https://blog.base2services.com/author/jared-brook" }, "dateModified" : "2026-07-17T05:30:15.147Z", "datePublished" : "2025-12-11T15:17:40.000Z", "headline" : "Hack Day: Beyond the Snapshot - Our Deep Dive into AWS Backup for Advanced Disaster Recovery", "image" : [ "https://blog.base2services.com/hubfs/Blog%20Images%20(Teal)-600-350px.png" ], "mainEntityOfPage" : { "@id" : "https://blog.base2services.com/hackday-our-deep-dive-into-aws-backup-for-advanced-disaster-recovery", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.base2services.com/hubfs/B2S_logo_600x400px.png" }, "name" : "base2Services" } } ```