{"id":6359,"date":"2026-06-19T13:54:43","date_gmt":"2026-06-19T13:54:43","guid":{"rendered":"https:\/\/cloudsave.app\/knowledge-base\/immutable-database-storage-ransomware\/"},"modified":"2026-06-19T14:01:34","modified_gmt":"2026-06-19T14:01:34","slug":"arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea","status":"publish","type":"post","link":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/","title":{"rendered":"Arhitektura nepromjenjive pohrane za arhive baza podataka radi za\u0161tite od ransomwarea"},"content":{"rendered":"<p>U modernom okru\u017eenju prijetnji, ransomware se razvio od oportunisti\u010dkog \u0161ifriranja do visoko ciljanih kampanja vi\u0161estruke iznude. Napredne trajne prijetnje (APT) i ransomware sindikati sada aktivno tra\u017ee sigurnosnu infrastrukturu i arhive baza podataka tijekom svog vremena boravka u sustavu. Ako napada\u010d kompromitira va\u0161u primarnu bazu podataka i istovremeno izbri\u0161e ili \u0161ifrira va\u0161e repozitorije sigurnosnih kopija, va\u0161a se organizacija suo\u010dava s katastrofalnim gubitkom podataka.<\/p>\n<p>Za administratore baza podataka (DBA) i DevOps in\u017eenjere, tradicionalna strategija sigurnosnog kopiranja 3-2-1 vi\u0161e nije dovoljna. Kako bi se zajam\u010dila pre\u017eivljavanje podataka, infrastrukturni timovi moraju usvojiti pravilo 3-2-1-1, gdje posljednja \u201e1\u201d predstavlja <strong>nepromjenjivu pohranu (immutable storage)<\/strong>.<\/p>\n<p>Ovaj \u010dlanak pru\u017ea sveobuhvatan, tehni\u010dki dubinski pregled projektiranja, implementacije i upravljanja nepromjenjivom pohranom za arhive baza podataka kako bi se osigurala apsolutna otpornost na ransomware.<\/p>\n<h2>Mehanika nepromjenjive pohrane<\/h2>\n<p>Nepromjenjiva pohrana oslanja se na arhitekturu \u201epi\u0161i jednom, \u010ditaj mnogo puta\u201d (WORM &#8211; Write-Once-Read-Many). Jednom kada se podaci zapi\u0161u na nepromjenjivo odredi\u0161te, nijedan korisnik ih ne mo\u017ee mijenjati, \u0161ifrirati ili brisati\u2014uklju\u010duju\u0107i administratore s root privilegijama ili kompromitirane servisne ra\u010dune\u2014sve dok ne istekne matemati\u010dki provedena vremenska blokada.<\/p>\n<h3>Na\u010din uskla\u0111enosti (Compliance Mode) naspram Na\u010dina upravljanja (Governance Mode)<\/h3>\n<p>Prilikom implementacije nepromjenjivosti, posebno u pohrani objekata u oblaku kao \u0161to su AWS S3, Azure Blob ili S3-kompatibilni lokalni SAN sustavi, morate razumjeti razliku izme\u0111u na\u010dina zadr\u017eavanja:<\/p>\n<ul>\n<li><strong>Na\u010din upravljanja (Governance Mode):<\/strong> Sprje\u010dava standardne korisnike da bri\u0161u ili mijenjaju objekte. Me\u0111utim, korisnici s odre\u0111enim IAM dozvolama (npr. <code>s3:BypassGovernanceRetention<\/code>) mogu zaobi\u0107i zaklju\u010davanje. Ovo je korisno za testiranje, ali <strong>nedovoljno za za\u0161titu od ransomwarea<\/strong>, jer napada\u010di \u010desto eskaliraju privilegije do razine domenskog administratora ili roota.<\/li>\n<li><strong>Na\u010din uskla\u0111enosti (Compliance Mode):<\/strong> Zlatni standard za obranu od ransomwarea. Jednom kada je objekt zaklju\u010dan u na\u010dinu uskla\u0111enosti, njegovo razdoblje zadr\u017eavanja se ne mo\u017ee skratiti, a objekt ne mo\u017ee izbrisati <em>nitko<\/em>, uklju\u010duju\u0107i AWS root ra\u010dun. Zaklju\u010davanje se provodi na razini klastera za pohranu.<\/li>\n<\/ul>\n<h2>Projektiranje nepromjenjivog cjevovoda sigurnosnih kopija<\/h2>\n<p>Robusna arhitektura arhiviranja baza podataka odvaja aktivne operacije baze podataka od nepromjenjivog arhivskog sloja. Ne mo\u017eete primijeniti nepromjenjivost na aktivne datoteke baze podataka (poput <code>.mdf<\/code>\/<code>.ldf<\/code> u SQL Serveru ili <code>pg_data<\/code> direktorija u PostgreSQL-u) jer baze podataka zahtijevaju stalan pristup \u010ditanja\/pisanja.<\/p>\n<p>Umjesto toga, nepromjenjivost se primjenjuje na:<br \/>\n1.  <strong>Datoteke potpunih i diferencijalnih sigurnosnih kopija:<\/strong> Osnovne snimke baze podataka.<br \/>\n2.  <strong>Transakcijske logove \/ WAL datoteke:<\/strong> Kontinuirani tok promjena baze podataka potreban za oporavak do odre\u0111ene to\u010dke u vremenu (PITR).<\/p>\n<h3>Odredi\u0161ta za nepromjenjivu pohranu<\/h3>\n<p>Nepromjenjivu pohranu mo\u017eete implementirati kroz razli\u010dite infrastrukturne slojeve:<br \/>\n*   <strong>Pohrana objekata u oblaku:<\/strong> AWS S3 Object Lock, Azure Blob Immutable Storage, Google Cloud Storage Retention Policies.<br \/>\n*   <strong>Lokalna pohrana objekata (On-Premises):<\/strong> MinIO, Cloudian ili Pure Storage FlashBlade koji podr\u017eavaju S3 Object Lock API-je.<br \/>\n*   <strong>Blok\/datote\u010dna pohrana:<\/strong> ZFS sa snimkama (snapshots) samo za \u010ditanje i delegiranom administracijom, ili Linux atributi datoteka.<\/p>\n<h2>Implementacija nepromjenjive pohrane: Tehni\u010dki vodi\u010di<\/h2>\n<h3>1. Pohrana objekata u oblaku: AWS S3 Object Lock<\/h3>\n<p>Da biste za\u0161titili dumpove baza podataka i transakcijske logove u AWS-u, morate omogu\u0107iti Object Lock u trenutku stvaranja spremnika (bucket).<\/p>\n<p>Prvo, stvorite spremnik s omogu\u0107enim Object Lockom:<\/p>\n<pre><code class=\"language-bash\">aws s3api create-bucket \n    --bucket prod-db-archive-immutable \n    --region us-east-1 \n    --object-lock-enabled-for-bucket\n<\/code><\/pre>\n<p>Zatim konfigurirajte zadanu politiku zadr\u017eavanja. Za arhive baza podataka, 30-dnevno zaklju\u010davanje uskla\u0111enosti je standardna osnovica, osiguravaju\u0107i da imate mjesec dana nepromjenjivih sigurnosnih kopija.<\/p>\n<pre><code class=\"language-bash\">aws s3api put-object-lock-configuration \n    --bucket prod-db-archive-immutable \n    --object-lock-configuration '{\n        &quot;ObjectLockEnabled&quot;: &quot;Enabled&quot;,\n        &quot;Rule&quot;: {\n            &quot;DefaultRetention&quot;: {\n                &quot;Mode&quot;: &quot;COMPLIANCE&quot;,\n                &quot;Days&quot;: 30\n            }\n        }\n    }'\n<\/code><\/pre>\n<p>Kada va\u0161a skripta ili agent za sigurnosno kopiranje baze podataka po\u0161alje datoteku u ovaj spremnik, S3 automatski izra\u010dunava <code>Retain Until Date<\/code> na temelju vremenske oznake stvaranja objekta plus 30 dana.<\/p>\n<h3>2. Lokalna nepromjenjivost: ZFS i Linux atributi<\/h3>\n<p>Ako arhivirate baze podataka na lokalni Linux poslu\u017eitelj za sigurnosne kopije, mo\u017eete posti\u0107i pseudo-nepromjenjivost pomo\u0107u naredbe <code>chattr<\/code> ili pravu nepromjenjivost pomo\u0107u ZFS snimki.<\/p>\n<p><strong>Kori\u0161tenje Linux <code>chattr<\/code>:<\/strong><br \/>\nOznaka <code>+i<\/code> (immutable) sprje\u010dava izmjenu, brisanje ili preimenovanje datoteke.<\/p>\n<pre><code class=\"language-bash\"># Dump baze podataka\npg_dump -U postgres -Fc mydb &gt; \/backups\/mydb_$(date +%F).dump\n\n# U\u010dinite sigurnosnu kopiju nepromjenjivom\nsudo chattr +i \/backups\/mydb_$(date +%F).dump\n\n# Provjerite atribut\nlsattr \/backups\/mydb_$(date +%F).dump\n# Izlaz: ----i---------e------- \/backups\/mydb_2023-10-27.dump\n<\/code><\/pre>\n<p><em>Napomena: Iako <code>chattr<\/code> zaustavlja osnovne ransomware skripte, sofisticirani napada\u010d s root pristupom mo\u017ee jednostavno pokrenuti <code>chattr -i<\/code>. Stoga se ovo mora kombinirati sa strogim RBAC-om i izoliranim mre\u017eama za sigurnosne kopije.<\/em><\/p>\n<p><strong>Kori\u0161tenje ZFS snimki:<\/strong><br \/>\nZFS pru\u017ea puno ja\u010du obranu. Uzimanjem snimke i postavljanjem &#8220;zadr\u017eavanja&#8221; (hold) na nju, sprje\u010davate njezino brisanje.<\/p>\n<pre><code class=\"language-bash\"># Uzmite snimku skupa podataka sigurnosnih kopija\nzfs snapshot tank\/db_backups@archive_$(date +%F)\n\n# Postavite zadr\u017eavanje na snimku kako biste sprije\u010dili brisanje\nzfs hold keep_30_days tank\/db_backups@archive_$(date +%F)\n\n# \u010cak ni root ne mo\u017ee uni\u0161titi ovu snimku bez uklanjanja zadr\u017eavanja\nzfs destroy tank\/db_backups@archive_$(date +%F)\n# Izlaz: cannot destroy 'tank\/db_backups@archive_...': dataset is busy\n<\/code><\/pre>\n<h2>Strategije arhiviranja specifi\u010dne za baze podataka<\/h2>\n<p>Da biste postigli oporavak do odre\u0111ene to\u010dke u vremenu (PITR), morate kontinuirano arhivirati transakcijske logove u svoju nepromjenjivu pohranu.<\/p>\n<h3>PostgreSQL WAL arhiviranje s pgBackRest<\/h3>\n<p><code>pgBackRest<\/code> je vrlo pouzdan alat za sigurnosno kopiranje PostgreSQL-a koji izvorno podr\u017eava S3-kompatibilnu pohranu. Kako biste za\u0161titili svoje Write-Ahead logove (WAL), konfigurirajte <code>pgBackRest<\/code> da ih \u0161alje izravno u va\u0161 nepromjenjivi S3 spremnik.<\/p>\n<p>U va\u0161oj <code>pgbackrest.conf<\/code> datoteci:<\/p>\n<pre><code class=\"language-ini\">[global]\nrepo1-type=s3\nrepo1-s3-bucket=prod-db-archive-immutable\nrepo1-s3-region=us-east-1\nrepo1-s3-endpoint=s3.amazonaws.com\nrepo1-s3-key=AKIAIOSFODNN7EXAMPLE\nrepo1-s3-key-secret=wJalrXUtnFEMI\/K7MDENG\/bPxRfiCYEXAMPLEKEY\n\n# Osigurajte da se zadr\u017eavanje uskladi s va\u0161om konfiguracijom S3 Object Lock\nrepo1-retention-full=2\nrepo1-retention-archive=2\n\n[prod_cluster]\npg1-path=\/var\/lib\/postgresql\/14\/main\n<\/code><\/pre>\n<p><em>Klju\u010dno razmatranje:<\/em> Ako va\u0161 S3 spremnik provodi 30-dnevno zaklju\u010davanje uskla\u0111enosti, a <code>pgBackRest<\/code> poku\u0161a iste\u0107i i izbrisati WAL datoteke nakon 14 dana na temelju <code>repo1-retention-archive<\/code>, API pozivi za brisanje ne\u0107e uspjeti. Morate osigurati da je politika zadr\u017eavanja va\u0161eg softvera za sigurnosno kopiranje jednaka ili dulja od nepromjenjivog zaklju\u010davanja na razini pohrane.<\/p>\n<h3>Microsoft SQL Server: Sigurnosno kopiranje na URL<\/h3>\n<p>SQL Server podr\u017eava izvorno sigurnosno kopiranje izravno na S3-kompatibilnu pohranu objekata. Mo\u017eete konfigurirati posao SQL Server Agenta za pisanje <code>.bak<\/code> i <code>.trn<\/code> datoteka izravno u nepromjenjivi spremnik.<\/p>\n<pre><code class=\"language-sql\">CREATE CREDENTIAL [s3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com]\nWITH IDENTITY = 'S3 Access Key',\nSECRET = 'AccessKeyID:SecretAccessKey';\nGO\n\nBACKUP DATABASE [ProductionDB]\nTO URL = 's3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com\/ProductionDB_Full.bak'\nWITH FORMAT, COMPRESSION, STATS = 10;\nGO\n<\/code><\/pre>\n<h2>Automatizacija i orkestracija s CloudSave<\/h2>\n<p>Upravljanje oznakama nepromjenjivog zadr\u017eavanja, rotiranje pristupnih klju\u010deva i osiguravanje sinkronizacije izme\u0111u politika zadr\u017eavanja baze podataka i zaklju\u010davanja pohrane putem prilago\u0111enih skripti vrlo je podlo\u017eno pogre\u0161kama. Jedna pogre\u0161na konfiguracija u cron poslu ili API pozivu mo\u017ee ostaviti va\u0161e arhive izlo\u017eenima ili rezultirati vrtoglavim tro\u0161kovima pohrane u oblaku zbog napu\u0161tenih, zaklju\u010danih objekata.<\/p>\n<p>Enterprise platforme za sigurnosno kopiranje kao \u0161to je CloudSave pojednostavljuju ovu arhitekturu. CloudSave se izvorno integrira s AWS S3 Object Lock, Azure Blob Immutable Storage i lokalnim S3-kompatibilnim API-jima.<\/p>\n<p>Prilikom konfiguriranja plana sigurnosnog kopiranja baze podataka u CloudSave:<br \/>\n1.  Platforma automatski upravlja VSS (Volume Shadow Copy Service) mirovanjem za SQL Server ili <code>pg_start_backup()<\/code> API-jem za PostgreSQL.<br \/>\n2.  Prenosi deduplicirane, \u0161ifrirane podatke sigurnosne kopije izravno na odredi\u0161te pohrane.<br \/>\n3.  CloudSave dinami\u010dki primjenjuje WORM API pozive (npr. <code>PutObjectRetention<\/code>) na razini svakog objekta, savr\u0161eno uskla\u0111uju\u0107i trajanje zaklju\u010davanja pohrane s rasporedom zadr\u017eavanja definiranim politikom.<br \/>\n4.  Ako napada\u010d kompromitira upravlja\u010dku konzolu CloudSave, i dalje ne mo\u017ee izbrisati sigurnosne kopije, jer zaklju\u010davanje uskla\u0111enosti provodi temeljna infrastrukturna pohrana, a ne softver za sigurnosno kopiranje.<\/p>\n<h2>Najbolje prakse za nepromjenjive arhive baza podataka<\/h2>\n<p>Kako biste osigurali da je va\u0161a nepromjenjiva arhitektura uistinu otporna, pridr\u017eavajte se sljede\u0107ih in\u017eenjerskih najboljih praksi:<\/p>\n<h3>1. Stroga NTP sinkronizacija<\/h3>\n<p>Nepromjenjiva zaklju\u010davanja matemati\u010dki su vezana uz vremenske oznake. Ako je NTP (Network Time Protocol) usluga na va\u0161em nizu za pohranu ili poslu\u017eitelju za sigurnosne kopije kompromitirana ili odstupa, to mo\u017ee uzrokovati prerano istjecanje zaklju\u010davanja ili da ona nikada ne isteknu. Osigurajte da va\u0161a infrastrukturna pohrana koristi autentificirane, redundantne NTP izvore.<\/p>\n<h3>2. Izolacija IAM uloga i vjerodajnica<\/h3>\n<p>Vjerodajnice koje se koriste za pisanje u nepromjenjivi spremnik moraju imati samo <code>s3:PutObject<\/code> i <code>s3:PutObjectRetention<\/code> dozvole. One <strong>nikada<\/strong> ne smiju imati <code>s3:DeleteObject<\/code> ili <code>s3:PutBucketObjectLockConfiguration<\/code> dozvole.<\/p>\n<p>Primjer IAM politike s najmanjim privilegijama za agenta sigurnosnog kopiranja baze podataka:<\/p>\n<pre><code class=\"language-json\">{\n    &quot;Version&quot;: &quot;2012-10-17&quot;,\n    &quot;Statement&quot;: [\n        {\n            &quot;Effect&quot;: &quot;Allow&quot;,\n            &quot;Action&quot;: [\n                &quot;s3:PutObject&quot;,\n                &quot;s3:GetBucketObjectLockConfiguration&quot;\n            ],\n            &quot;Resource&quot;: [\n                &quot;arn:aws:s3:::prod-db-archive-immutable&quot;,\n                &quot;arn:aws:s3:::prod-db-archive-immutable\/*&quot;\n            ]\n        }\n    ]\n}\n<\/code><\/pre>\n<h3>3. Odre\u0111ivanje razdoblja zadr\u017eavanja<\/h3>\n<p>Ne postavljajte zaklju\u010davanja uskla\u0111enosti na pretjerano duga razdoblja (npr. 7 godina za uskla\u0111enost) na va\u0161em primarnom sloju za brzi oporavak. Baze podataka generiraju ogromne koli\u010dine WAL\/transakcijskih log podataka. Zaklju\u010davanje ovih podataka godinama rezultirat \u0107e eksponencijalnim rastom tro\u0161kova pohrane.<br \/>\nUmjesto toga, koristite slojeviti pristup:<br \/>\n*   <strong>Sloj operativnog oporavka:<\/strong> 14 do 30 dana nepromjenjivog zadr\u017eavanja za potpune sigurnosne kopije i logove.<br \/>\n*   <strong>Sloj dugoro\u010dnog arhiviranja:<\/strong> Mjese\u010dne potpune sigurnosne kopije premje\u0161tene u Glacier\/Deep Archive s Vault Lockom na 1-7 godina.<\/p>\n<h3>4. Redovito testiranje oporavka u izoliranim (air-gapped) VPC-ovima<\/h3>\n<p>Nepromjenjivost jam\u010di da se podaci ne mogu izbrisati, ali ne jam\u010di da su podaci bez logi\u010dke korupcije. Morate automatizirati vra\u0107anje svojih nepromjenjivih arhiva baza podataka u izolirani, air-gapped VPC ili VLAN. Pokrenite <code>DBCC CHECKDB<\/code> (SQL Server) ili <code>pg_amcheck<\/code> (PostgreSQL) na vra\u0107enim podacima kako biste provjerili strukturni integritet.<\/p>\n<h2>Zaklju\u010dak<\/h2>\n<p>Obrana od ransomwarea je vje\u017eba u pretpostavci proboja. Do trenutka kada se aktivira upozorenje u va\u0161em SIEM-u, napada\u010di su vjerojatno ve\u0107 poku\u0161ali kompromitirati va\u0161u infrastrukturu za sigurnosno kopiranje. Projektiranjem arhiva baza podataka pomo\u0107u nepromjenjive pohrane u na\u010dinu uskla\u0111enosti, napada\u010dima oduzimate njihovu glavnu polugu. Bez obzira koristite li izvorne API-je u oblaku, ZFS zadr\u017eavanja ili platformu za orkestraciju kao \u0161to je CloudSave, implementacija WORM pohrane vi\u0161e nije opcionalna\u2014to je obvezan stup moderne administracije baza podataka i oporavka od katastrofe.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"Immutable Database Storage to Defeat Ransomware","rank_math_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","rank_math_focus_keyword":"immutable database storage","footnotes":""},"categories":[375],"tags":[4565,4566,4567,1279,4568,4569],"class_list":["post-6359","post","type-post","status-publish","format-standard","hentry","category-database-backup","tag-3-2-1-1-backup","tag-data-survivability","tag-database-archives","tag-enterprise-backup","tag-immutable-storage","tag-ransomware-protection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Immutable Database Storage to Defeat Ransomware<\/title>\n<meta name=\"description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/\" \/>\n<meta property=\"og:locale\" content=\"hr_HR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Arhitektura nepromjenjive pohrane za arhive baza podataka radi za\u0161tite od ransomwarea\" \/>\n<meta property=\"og:description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/\" \/>\n<meta property=\"og:site_name\" content=\"CloudSave\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-19T13:54:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-19T14:01:34+00:00\" \/>\n<meta name=\"author\" content=\"shervinrv\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Napisao\/la\" \/>\n\t<meta name=\"twitter:data1\" content=\"shervinrv\" \/>\n\t<meta name=\"twitter:label2\" content=\"Procijenjeno vrijeme \u010ditanja\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minuta\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\\\/\"},\"author\":{\"name\":\"shervinrv\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"headline\":\"Arhitektura nepromjenjive pohrane za arhive baza podataka radi za\u0161tite od ransomwarea\",\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T14:01:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\\\/\"},\"wordCount\":1427,\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"keywords\":[\"3-2-1-1 backup\",\"data survivability\",\"database archives\",\"Enterprise Backup\",\"immutable storage\",\"ransomware protection\"],\"articleSection\":[\"Database Backup\"],\"inLanguage\":\"hr\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\\\/\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\\\/\",\"name\":\"Immutable Database Storage to Defeat Ransomware\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/#website\"},\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T14:01:34+00:00\",\"description\":\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\\\/#breadcrumb\"},\"inLanguage\":\"hr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cloudsave.app\\\/hr\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/knowledge-base\\\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Arhitektura nepromjenjive pohrane za arhive baza podataka radi za\u0161tite od ransomwarea\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/#website\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/\",\"name\":\"CloudSave\",\"description\":\"CloudSave\",\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"hr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\",\"name\":\"shervinrv\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"hr\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"contentUrl\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"width\":859,\"height\":150,\"caption\":\"shervinrv\"},\"logo\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\"},\"sameAs\":[\"http:\\\/\\\/cloudsave.app\"],\"url\":\"https:\\\/\\\/cloudsave.app\\\/hr\\\/knowledge-base\\\/author\\\/shervinrv\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Immutable Database Storage to Defeat Ransomware","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/","og_locale":"hr_HR","og_type":"article","og_title":"Arhitektura nepromjenjive pohrane za arhive baza podataka radi za\u0161tite od ransomwarea","og_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","og_url":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/","og_site_name":"CloudSave","article_published_time":"2026-06-19T13:54:43+00:00","article_modified_time":"2026-06-19T14:01:34+00:00","author":"shervinrv","twitter_card":"summary_large_image","twitter_misc":{"Napisao\/la":"shervinrv","Procijenjeno vrijeme \u010ditanja":"9 minuta"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/#article","isPartOf":{"@id":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/"},"author":{"name":"shervinrv","@id":"https:\/\/cloudsave.app\/hr\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"headline":"Arhitektura nepromjenjive pohrane za arhive baza podataka radi za\u0161tite od ransomwarea","datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T14:01:34+00:00","mainEntityOfPage":{"@id":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/"},"wordCount":1427,"publisher":{"@id":"https:\/\/cloudsave.app\/hr\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"keywords":["3-2-1-1 backup","data survivability","database archives","Enterprise Backup","immutable storage","ransomware protection"],"articleSection":["Database Backup"],"inLanguage":"hr"},{"@type":"WebPage","@id":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/","url":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/","name":"Immutable Database Storage to Defeat Ransomware","isPartOf":{"@id":"https:\/\/cloudsave.app\/hr\/#website"},"datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T14:01:34+00:00","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","breadcrumb":{"@id":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/#breadcrumb"},"inLanguage":"hr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cloudsave.app\/hr\/knowledge-base\/arhitektura-nepromjenjive-pohrane-za-arhive-baza-podataka-radi-za%c5%a1tite-od-ransomwarea\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cloudsave.app\/hr\/"},{"@type":"ListItem","position":2,"name":"Arhitektura nepromjenjive pohrane za arhive baza podataka radi za\u0161tite od ransomwarea"}]},{"@type":"WebSite","@id":"https:\/\/cloudsave.app\/hr\/#website","url":"https:\/\/cloudsave.app\/hr\/","name":"CloudSave","description":"CloudSave","publisher":{"@id":"https:\/\/cloudsave.app\/hr\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cloudsave.app\/hr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"hr"},{"@type":["Person","Organization"],"@id":"https:\/\/cloudsave.app\/hr\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d","name":"shervinrv","image":{"@type":"ImageObject","inLanguage":"hr","@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","url":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","contentUrl":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","width":859,"height":150,"caption":"shervinrv"},"logo":{"@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png"},"sameAs":["http:\/\/cloudsave.app"],"url":"https:\/\/cloudsave.app\/hr\/knowledge-base\/author\/shervinrv\/"}]}},"_links":{"self":[{"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/posts\/6359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/comments?post=6359"}],"version-history":[{"count":1,"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/posts\/6359\/revisions"}],"predecessor-version":[{"id":6423,"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/posts\/6359\/revisions\/6423"}],"wp:attachment":[{"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/media?parent=6359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/categories?post=6359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudsave.app\/hr\/wp-json\/wp\/v2\/tags?post=6359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}