Clumio Protect

Clumio Protect for Amazon S3 manages protecting business-critical data in AWS from ransomware, bad actors, and accidental data loss. This solution is built from the cloud up, leveraging native AWS APIs and an infrastructure-less, agentless deployment model via Cloud Formation Template or Terraform. This approach allows for integration across all AWS accounts, providing a single pane of glass to manage S3 buckets and prefixes.

The technical architecture of Clumio Protect relies on logical air-gapped backups, which store data outside of the customer's AWS account, preventing hackers from accessing or deleting the protected data. This is achieved through the use of AWS Lambda functions that handle data inventory, movement, and processing, ensuring scalable and parallel compute operations. The solution also employs immutable data storage with both data-at-rest and in-flight encryption, and supports bring-your-own-key (BYOK) for additional security.

Operationally, Clumio Protect introduces Protection Groups, an abstraction layer that simplifies data classification and management across multiple AWS accounts. This allows for global search, compliance reporting, and data recovery at a granular level, far exceeding the capabilities of S3 Object Versioning. The recovery process is optimized for low Recovery Time Objectives (RTOs), enabling swift restoration of data in the event of a disaster or attack.

Key operational considerations include the cost-efficiency of the solution, which helps reduce AWS backup costs by allowing customers to protect and recover data down to the object level and pay only for what they consume. Additionally, Clumio ensures compliance with various standards such as ISO 27001, ISO 27701, PCI DSS, SOC 2, and HIPAA, simplifying backup compliance through automated reporting.