3 commits

Author	SHA1	Message	Date
Adam Moussa	7aaf8340a5	Add 4 GiB ephemeral storage to verification Lambda ... Monthly restore-test downloads and extracts the full dump tarball in /tmp. As the dump grows with LFS data, the default 512 MB will eventually cause ENOSPC failures.	2026-05-14 15:03:36 -04:00
Adam Moussa	c771ed4f08	Rename SECRET_ARN env vars to SECRET_NAME to match actual values	2026-05-14 11:38:31 -04:00
Adam Moussa	d57aea19f3	Add 3-2-1 backup strategy with cross-region replication and GCS offsite ... Implements a fully compliant 3-2-1 backup architecture: - Copy 1 (live): Harden existing EBS snapshots to 30-day retention - Copy 2 (near-site): S3 cross-region replication to us-west-2 with Object Lock (governance 90d) and versioning - Copy 3 (offsite): GCS bucket in dedicated seahaven-backups GCP project with 2-year irreversible retention lock Also adds a verification Lambda that checks all 3 locations daily and runs monthly restore tests with SQLite integrity checks.	2026-05-13 18:02:50 -04:00