BlogAid

Help for DIY Site Owners and Webmasters - WordPress, SEO, HTTPS, Security, and Performance

WordPress • SEO • Conversion
Security • Performance • Member Sites
  • Home
  • Blog
    • Current Posts
    • Archives
  • Classes
    • Classes & Consults
    • Member Site Help
  • Videos
  • Tips Tuesday
  • Site Services
    • Setup, Backups, Fixes
    • Site Service Requests
    • Site Audits
      • What’s In the Audit
      • Audit Request Form
      • Site Audit Testimonials
    • HTTPS Conversion
      • About the Service
      • HTTPS Request Form
      • Happy HTTPS Conversion Clients
  • Resources
    • Plugins
    • All Resources
    • Start Here with BlogAid
  • About
    • About MaAnna
    • Geek to Speak
    • Site Audit Testimonials
  • Contact
    • General Contact
    • Site Service Requests

Setup Amazon S3 Account for Backup and Media Storage

May 31, 2017 by MaAnna Stephenson

TwitterFacebookGoogle+PinterestLinkedinReddit

Create Amazon S3 Account for Backup and Media Storage

See how to acquire and set up an Amazon S3 account to store your WordPress site backup files and media files such as audio, video, and PDFs. 

Plus, get important tips for better security.

See the notes below the video for extra security on your AS3 account and files.


Like this tutorial?
Subscribe to the BlogAid YouTube Channel



Extra Security for Your Files

Hackers can get into everything now!

Even if you already have your AS3 account set up, you need to take extra steps to secure it.

Create an IAM User

Never use your master AS3 keys in plugins!!!

If a hacker ever compromises your site, they can steal those keys.

It’s best to create a new IAM User for each bucket. And to create a bucket for each file type.

For example:

  • Create a bucket for only your site backups.
  • Create an IAM user that only has keys, not login access.
  • Use those keys with your backup plugin integration.
  • Create another bucket and IAM user for publicly available media files.

Restrict Access

What if your site gets wiped out or hacked?

Good thing you have backup files stored off site, right?

What if those backup files get wiped out?

Oh crap!!!!!!

This is why you need to go two steps further to protect your backup files.

First, restrict your IAM user to only one bucket.

That’s done via a Policy rule.

Second, set up Versioning.

Even if a hacker steals the IAM User keys from your plugin, they only have access to that one bucket, not your whole AS3 account.

With Versioning, the hacker can’t tamper with previous backup files either.

Need a Little Help?

Setting up an IAM User, creating a restrictive policy, and setting up Versioning with auto delete is a little techie.

Contact me to help you setup these one-time things.

Want to Learn How to Protect Sites?

If you’re a designer or maintain client sites, security is a top priority, because that’s a liability for you.

And you certainly need to know that the site’s backup files are protected and secure.

See Level 2 of my Webmaster Training for full tutorials on AS3 IAM User creation, Versioning, and Auto Delete.

TwitterFacebookGoogle+PinterestLinkedinReddit

Filed Under: Backup 1 Comment

About MaAnna Stephenson

MaAnna is a geek who can still speak in plain English and helps non-geeks create sites that get noticed by search engines and readers, are secure, plus convert, and perform well.
Connect with MaAnna online

What Every Site Owner Should Know could save you hundreds of dollars and months of frustration. Free with subscription to BlogAid News.



Comments

  1. Ashfak Reza says

    May 31, 2017 at 11:18 pm

    Thanks you for Post. it was very useful for me.keep sharing such ideas in the future as well. Thanks for giving me the useful information. I think I need it!It will definitely help me to secure my files

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

BlogAid News

What Every Site Owner Should Know could save you hundreds of dollars and months of frustration. Get it free with your subscription to BlogAid News.


Hi! I'm MaAnna, and I'm a geek who can still speak in plain English. I help non-geeks become confident, successful owners of sites that are secure, perform well, and get noticed by search engines and readers. How May I Help You?

Let’s Connect Online

Looking for Something?

Search by Category

BlogAid News

What Every Site Owner Should Know could save you hundreds of dollars and months of frustration.

Get it free with your subscription to BlogAid News.


   

From the Blog

  • Tips Tuesday – Disable Gutenberg, Speed Post Series and Tutorials, MediaVine
  • Tips Tuesday – Changes to GDPR, MediaVine, Cloudflare, SEO, PHP 7.2
  • Tips Tuesday – Live Site Speed Tests, Speed Workshop, Sizzling About Us Page
  • Tips Tuesday – Ultimate Speed, Cloudflare DNS Resolver, WordPress 4.9.5 Release
  • Tips Tuesday – Yoast 7.1 Tutorials, GDPR, SSL Authentication, Site Speed

© Copyright 2018 Blog Aid · WordPress for Non-Geeks · All Rights Reserved

Disclosure: Some of the links on this website may be affiliate links. When you make a purchase from these links, I earn a small commission.

While commissions allow me to keep this site 100% free, I only endorse products I trust and use for myself and clients.