3 commits

Author	SHA1	Message	Date
Adam Moussa	4d9c30fbb3	Address cross-review findings for backup verification ... - Add size guard before downloading dump in restore test (3.5 GB cap) - Use paginator for list_objects_v2 in S3 checks and restore test - Remove unnecessary overrideLogicalId on GcsTransferCredentials secret - Pass explicit { mode: "daily" } to daily EventBridge rule target - Add fallback for SSM parameter fetch in backup script - Export replica bucket ARN/name from replica stack, consume via props	2026-05-15 17:25:25 -04:00
Adam Moussa	bafb924cfc	Fix EBS snapshot state check, drop unused GCS write grant and dead lifecycle rule	2026-05-14 13:24:24 -04:00
Adam Moussa	d57aea19f3	Add 3-2-1 backup strategy with cross-region replication and GCS offsite ... Implements a fully compliant 3-2-1 backup architecture: - Copy 1 (live): Harden existing EBS snapshots to 30-day retention - Copy 2 (near-site): S3 cross-region replication to us-west-2 with Object Lock (governance 90d) and versioning - Copy 3 (offsite): GCS bucket in dedicated seahaven-backups GCP project with 2-year irreversible retention lock Also adds a verification Lambda that checks all 3 locations daily and runs monthly restore tests with SQLite integrity checks.	2026-05-13 18:02:50 -04:00