AWS Snowball | Security Flashcards
Can I use Snowball to migrate data from one AWS region to another AWS region?
Security
AWS Snowball | Storage
No. Snowball is intended to serve as a data transport solution for moving high volumes of data into and out of a designated AWS region. For use cases that require data transfer between AWS regions, we recommend using S3 Cross-Region Replication as an alternative.
Does Snowball encrypt my data?
Security
AWS Snowball | Storage
Snowball encrypts all data with 256-bit encryption. You manage your encryption keys by using the AWS Key Management Service (AWS KMS). Your keys are never sent to or stored on the appliance.
Does AWS have a way to tell if the device was tampered with during transit?
Security
AWS Snowball | Storage
In addition to using a tamper-resistant enclosure, Snowball uses an industry-standard Trusted Platform Module (TPM) with a dedicated processor designed to detect any unauthorized modifications to the hardware, firmware, or software. AWS inspects every appliance for any signs of tampering and to verify that no changes were detected by the TPM.
What happens to the data on the appliance when it has been successfully transferred to AWS?
Security
AWS Snowball | Storage
When the data transfer job has been processed and verified, AWS performs a software erasure of the Snowball appliance that follows the National Institute of Standards and Technology (NIST) guidelines for media sanitization.
Is there a way to easily track my data transfer jobs?
Security
AWS Snowball | Storage
Snowball uses an innovative, E Ink shipping label designed to ensure the appliance is automatically sent to the correct AWS facility and which also helps in tracking. When you have completed your data transfer job, you can track it by using Amazon SNS, text messages, and the console.
