ADR 014: Object Storage Backups
Status: Proposed | Date: 2025-07-22
Context
Current backup approaches lack cross-region redundancy and automated lifecycle management, creating single points of failure and compliance risks for government data retention requirements. Traditional storage systems do not provide the durability and geographic distribution needed for critical government systems.
Key challenges:
- Single region backup storage creating vulnerability to regional outages
- Manual backup processes prone to human error
- Lack of automated recovery testing
- Insufficient geographic separation for disaster recovery
References:
Decision
Implement standardized object storage backup solution with automated cross-region replication and lifecycle management for all critical systems and data.
Storage Requirements:
- Object storage with versioning and immutable storage capabilities
- Database, application data, and infrastructure configuration backups
- Encryption at rest and in transit per ADR 005: Secrets Management
- Access controls aligned with ADR 001: Application Isolation
Critical Systems Definition:
- Production databases containing citizen or business data
- Application source code and deployment configurations
- Security logs and audit trails
- Infrastructure as Code templates and state files
Geographic Distribution:
- Cross-region replication within Australia
- Multi-cloud backup for critical systems
- Monitoring integration per ADR 007: Centralised Security Logging
Lifecycle Management:
- Automated storage tiering based on age and access patterns
- Compliance-based retention policies
- Recovery testing and validation procedures
Recovery Objectives:
- Recovery Time Objective (RTO): 4 hours for critical systems, 24 hours for standard systems
- Recovery Point Objective (RPO): 1 hour for databases, 24 hours for static content
- Implementation Example: AWS S3 Cross-Region Replication to Australian regions
Consequences
Benefits:
- Automated disaster recovery meeting defined RTO/RPO objectives
- Geographic redundancy protecting against regional outages
- Compliance with government data retention requirements
Risks if not implemented:
- Permanent data loss from infrastructure failures
- Extended service recovery times affecting citizen services
- Regulatory violations from inadequate data protection