{"id":6399,"date":"2026-06-19T13:54:43","date_gmt":"2026-06-19T13:54:43","guid":{"rendered":"https:\/\/cloudsave.app\/knowledge-base\/immutable-database-storage-ransomware\/"},"modified":"2026-06-19T14:21:02","modified_gmt":"2026-06-19T14:21:02","slug":"arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera","status":"publish","type":"post","link":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/","title":{"rendered":"Arhitektura nepromenljivog skladi\u0161ta za arhive baza podataka radi za\u0161tite od rensomvera"},"content":{"rendered":"<p>U savremenom okru\u017eenju pretnji, ransomware je evoluirao od oportunisti\u010dkog \u0161ifrovanja do visoko ciljanih kampanja vi\u0161estruke iznude. Napredne uporne pretnje (APT) i ransomware sindikati sada aktivno tragaju za infrastrukturom za rezervne kopije i arhivama baza podataka tokom vremena provedenog u sistemu. Ako napada\u010d kompromituje va\u0161u primarnu bazu podataka i istovremeno izbri\u0161e ili \u0161ifruje va\u0161e repozitorijume rezervnih kopija, va\u0161a organizacija se suo\u010dava sa katastrofalnim gubitkom podataka.<\/p>\n<p>Za administratore baza podataka (DBA) i DevOps in\u017eenjere, tradicionalna 3-2-1 strategija rezervnih kopija vi\u0161e nije dovoljna. Da bi garantovali pre\u017eivljavanje podataka, infrastrukturni timovi moraju usvojiti pravilo 3-2-1-1, gde poslednja \u201e1\u201c predstavlja <strong>nepromenljivo skladi\u0161te (immutable storage)<\/strong>.<\/p>\n<p>Ovaj \u010dlanak pru\u017ea sveobuhvatan, tehni\u010dki dubinski pregled projektovanja, implementacije i upravljanja nepromenljivim skladi\u0161tem za arhive baza podataka kako bi se osigurala apsolutna otpornost na ransomware.<\/p>\n<h2>Mehanika nepromenljivog skladi\u0161ta<\/h2>\n<p>Nepromenljivo skladi\u0161te se oslanja na arhitekturu \u201epi\u0161i jednom, \u010ditaj mnogo\u201c (WORM &#8211; Write-Once-Read-Many). Kada se podaci zapi\u0161u na nepromenljivu lokaciju, nijedan korisnik ih ne mo\u017ee modifikovati, \u0161ifrovati ili izbrisati\u2014uklju\u010duju\u0107i administratore sa root privilegijama ili kompromitovane servisne naloge\u2014sve dok ne istekne matemati\u010dki nametnuto vremensko zaklju\u010davanje.<\/p>\n<h3>Re\u017eim usagla\u0161enosti (Compliance Mode) naspram re\u017eima upravljanja (Governance Mode)<\/h3>\n<p>Prilikom implementacije nepromenljivosti, posebno u objektno skladi\u0161te u oblaku kao \u0161to su AWS S3, Azure Blob ili S3-kompatibilni lokalni SAN sistemi, morate razumeti razliku izme\u0111u re\u017eima zadr\u017eavanja:<\/p>\n<ul>\n<li><strong>Re\u017eim upravljanja (Governance Mode):<\/strong> Spre\u010dava standardne korisnike da bri\u0161u ili menjaju objekte. Me\u0111utim, korisnici sa specifi\u010dnim IAM dozvolama (npr. <code>s3:BypassGovernanceRetention<\/code>) mogu zaobi\u0107i zaklju\u010davanje. Ovo je korisno za testiranje, ali <strong>nedovoljno za za\u0161titu od ransomware-a<\/strong>, jer napada\u010di \u010desto eskaliraju privilegije do nivoa administratora domena ili root-a.<\/li>\n<li><strong>Re\u017eim usagla\u0161enosti (Compliance Mode):<\/strong> Zlatni standard za odbranu od ransomware-a. Kada je objekat zaklju\u010dan u re\u017eimu usagla\u0161enosti, njegov period zadr\u017eavanja se ne mo\u017ee skratiti, a objekat ne mo\u017ee izbrisati <em>niko<\/em>, uklju\u010duju\u0107i AWS root nalog. Zaklju\u010davanje se sprovodi na nivou skladi\u0161nog klastera.<\/li>\n<\/ul>\n<h2>Projektovanje nepromenljivog cjevovoda rezervnih kopija<\/h2>\n<p>Robusna arhitektura arhiviranja baza podataka odvaja aktivne operacije baze podataka od nepromenljivog nivoa arhive. Ne mo\u017eete primeniti nepromenljivost na aktivne datoteke baze podataka (kao \u0161to su <code>.mdf<\/code>\/<code>.ldf<\/code> u SQL Serveru ili <code>pg_data<\/code> direktorijum u PostgreSQL-u) jer baze podataka zahtevaju stalan pristup za \u010ditanje\/pisanje.<\/p>\n<p>Umesto toga, nepromenljivost se primenjuje na:<br \/>\n1.  <strong>Datoteke punih i diferencijalnih rezervnih kopija:<\/strong> Osnovni snimci baze podataka.<br \/>\n2.  <strong>Transakcione logove \/ WAL datoteke:<\/strong> Kontinuirani tok promena u bazi podataka potreban za oporavak do odre\u0111ene ta\u010dke u vremenu (PITR).<\/p>\n<h3>Skladi\u0161ne lokacije za nepromenljivost<\/h3>\n<p>Nepromenljivo skladi\u0161te mo\u017eete implementirati na razli\u010ditim infrastrukturnim nivoima:<br \/>\n*   <strong>Objektno skladi\u0161te u oblaku:<\/strong> AWS S3 Object Lock, Azure Blob Immutable Storage, Google Cloud Storage Retention Policies.<br \/>\n*   <strong>Lokalno objektno skladi\u0161te:<\/strong> MinIO, Cloudian ili Pure Storage FlashBlade koji podr\u017eavaju S3 Object Lock API-je.<br \/>\n*   <strong>Blok\/fajl skladi\u0161te:<\/strong> ZFS sa snimcima samo za \u010ditanje i delegiranom administracijom, ili Linux atributi datoteka.<\/p>\n<h2>Implementacija nepromenljivog skladi\u0161ta: Tehni\u010dki vodi\u010di<\/h2>\n<h3>1. Objektno skladi\u0161te u oblaku: AWS S3 Object Lock<\/h3>\n<p>Da biste za\u0161titili dumpove baza podataka i transakcione logove u AWS-u, morate omogu\u0107iti Object Lock u trenutku kreiranja bucket-a.<\/p>\n<p>Prvo, kreirajte bucket sa omogu\u0107enim Object Lock-om:<\/p>\n<pre><code class=\"language-bash\">aws s3api create-bucket \n    --bucket prod-db-archive-immutable \n    --region us-east-1 \n    --object-lock-enabled-for-bucket\n<\/code><\/pre>\n<p>Zatim, konfiguri\u0161ite podrazumevanu politiku zadr\u017eavanja. Za arhive baza podataka, 30-dnevno zaklju\u010davanje usagla\u0161enosti je standardna osnova, koja osigurava da imate mesec dana nepromenljivih rezervnih kopija.<\/p>\n<pre><code class=\"language-bash\">aws s3api put-object-lock-configuration \n    --bucket prod-db-archive-immutable \n    --object-lock-configuration '{\n        &quot;ObjectLockEnabled&quot;: &quot;Enabled&quot;,\n        &quot;Rule&quot;: {\n            &quot;DefaultRetention&quot;: {\n                &quot;Mode&quot;: &quot;COMPLIANCE&quot;,\n                &quot;Days&quot;: 30\n            }\n        }\n    }'\n<\/code><\/pre>\n<p>Kada va\u0161a skripta ili agent za rezervne kopije baze podataka po\u0161alje datoteku u ovaj bucket, S3 automatski izra\u010dunava <code>Retain Until Date<\/code> na osnovu vremenske oznake kreiranja objekta plus 30 dana.<\/p>\n<h3>2. Lokalna nepromenljivost: ZFS i Linux atributi<\/h3>\n<p>Ako arhivirate baze podataka na lokalni Linux server za rezervne kopije, mo\u017eete posti\u0107i pseudo-nepromenljivost koriste\u0107i <code>chattr<\/code> komandu, ili pravu nepromenljivost koriste\u0107i ZFS snimke.<\/p>\n<p><strong>Kori\u0161\u0107enje Linux <code>chattr<\/code>:<\/strong><br \/>\n<code>+i<\/code> (immutable) fleg spre\u010dava modifikaciju, brisanje ili preimenovanje datoteke.<\/p>\n<pre><code class=\"language-bash\"># Dump baze podataka\npg_dump -U postgres -Fc mydb &gt; \/backups\/mydb_$(date +%F).dump\n\n# U\u010dinite rezervnu kopiju nepromenljivom\nsudo chattr +i \/backups\/mydb_$(date +%F).dump\n\n# Proverite atribut\nlsattr \/backups\/mydb_$(date +%F).dump\n# Izlaz: ----i---------e------- \/backups\/mydb_2023-10-27.dump\n<\/code><\/pre>\n<p><em>Napomena: Iako <code>chattr<\/code> zaustavlja osnovne ransomware skripte, sofisticirani napada\u010d sa root pristupom mo\u017ee jednostavno pokrenuti <code>chattr -i<\/code>. Stoga se ovo mora kombinovati sa strogim RBAC-om i izolovanim mre\u017eama za rezervne kopije.<\/em><\/p>\n<p><strong>Kori\u0161\u0107enje ZFS snimaka:<\/strong><br \/>\nZFS pru\u017ea mnogo ja\u010du odbranu. Pravljenjem snimka i postavljanjem \u201ezadr\u0161ke\u201c (hold) na njega, spre\u010davate njegovo brisanje.<\/p>\n<pre><code class=\"language-bash\"># Napravite snimak dataseta rezervnih kopija\nzfs snapshot tank\/db_backups@archive_$(date +%F)\n\n# Postavite zadr\u0161ku na snimak da spre\u010dite brisanje\nzfs hold keep_30_days tank\/db_backups@archive_$(date +%F)\n\n# \u010cak ni root ne mo\u017ee uni\u0161titi ovaj snimak bez uklanjanja zadr\u0161ke\nzfs destroy tank\/db_backups@archive_$(date +%F)\n# Izlaz: cannot destroy 'tank\/db_backups@archive_...': dataset is busy\n<\/code><\/pre>\n<h2>Strategije arhiviranja specifi\u010dne za baze podataka<\/h2>\n<p>Da biste postigli oporavak do odre\u0111ene ta\u010dke u vremenu (PITR), morate kontinuirano arhivirati transakcione logove u svoje nepromenljivo skladi\u0161te.<\/p>\n<h3>PostgreSQL WAL arhiviranje sa pgBackRest<\/h3>\n<p><code>pgBackRest<\/code> je veoma pouzdan alat za rezervne kopije za PostgreSQL koji izvorno podr\u017eava S3-kompatibilno skladi\u0161te. Da biste za\u0161titili svoje Write-Ahead logove (WAL), konfiguri\u0161ite <code>pgBackRest<\/code> da ih \u0161alje direktno u va\u0161 nepromenljivi S3 bucket.<\/p>\n<p>U va\u0161em <code>pgbackrest.conf<\/code>:<\/p>\n<pre><code class=\"language-ini\">[global]\nrepo1-type=s3\nrepo1-s3-bucket=prod-db-archive-immutable\nrepo1-s3-region=us-east-1\nrepo1-s3-endpoint=s3.amazonaws.com\nrepo1-s3-key=AKIAIOSFODNN7EXAMPLE\nrepo1-s3-key-secret=wJalrXUtnFEMI\/K7MDENG\/bPxRfiCYEXAMPLEKEY\n\n# Osigurajte da se zadr\u017eavanje poklapa sa va\u0161om S3 Object Lock konfiguracijom\nrepo1-retention-full=2\nrepo1-retention-archive=2\n\n[prod_cluster]\npg1-path=\/var\/lib\/postgresql\/14\/main\n<\/code><\/pre>\n<p><em>Klju\u010dno razmatranje:<\/em> Ako va\u0161 S3 bucket name\u0107e 30-dnevno zaklju\u010davanje usagla\u0161enosti, a <code>pgBackRest<\/code> poku\u0161a da istekne i izbri\u0161e WAL datoteke nakon 14 dana na osnovu <code>repo1-retention-archive<\/code>, API pozivi za brisanje \u0107e neuspeti. Morate osigurati da je politika zadr\u017eavanja va\u0161eg softvera za rezervne kopije jednaka ili du\u017ea od nepromenljivog zaklju\u010davanja na nivou skladi\u0161ta.<\/p>\n<h3>Microsoft SQL Server: Backup to URL<\/h3>\n<p>SQL Server podr\u017eava izvorne rezervne kopije direktno na S3-kompatibilno objektno skladi\u0161te. Mo\u017eete konfigurisati SQL Server Agent posao da pi\u0161e <code>.bak<\/code> i <code>.trn<\/code> datoteke direktno u nepromenljivi bucket.<\/p>\n<pre><code class=\"language-sql\">CREATE CREDENTIAL [s3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com]\nWITH IDENTITY = 'S3 Access Key',\nSECRET = 'AccessKeyID:SecretAccessKey';\nGO\n\nBACKUP DATABASE [ProductionDB]\nTO URL = 's3:\/\/prod-db-archive-immutable.s3.us-east-1.amazonaws.com\/ProductionDB_Full.bak'\nWITH FORMAT, COMPRESSION, STATS = 10;\nGO\n<\/code><\/pre>\n<h2>Automatizacija i orkestracija sa CloudSave<\/h2>\n<p>Upravljanje flegovima nepromenljivog zadr\u017eavanja, rotiranje pristupnih klju\u010deva i osiguravanje sinhronizacije izme\u0111u politika zadr\u017eavanja baze podataka i zaklju\u010davanja skladi\u0161ta putem prilago\u0111enih skripti je veoma podlo\u017eno gre\u0161kama. Jedna pogre\u0161na konfiguracija u cron poslu ili API pozivu mo\u017ee ostaviti va\u0161e arhive izlo\u017eenim ili rezultirati drasti\u010dnim pove\u0107anjem tro\u0161kova skladi\u0161tenja u oblaku zbog napu\u0161tenih, zaklju\u010danih objekata.<\/p>\n<p>Enterprise platforme za rezervne kopije kao \u0161to je CloudSave pojednostavljuju ovu arhitekturu. CloudSave se izvorno integri\u0161e sa AWS S3 Object Lock, Azure Blob Immutable Storage i lokalnim S3-kompatibilnim API-jima.<\/p>\n<p>Prilikom konfigurisanja plana rezervnih kopija baze podataka u CloudSave-u:<br \/>\n1. Platforma automatski upravlja VSS (Volume Shadow Copy Service) mirovanjem za SQL Server ili <code>pg_start_backup()<\/code> API-jem za PostgreSQL.<br \/>\n2. Prenosi deduplikovane, \u0161ifrovane podatke rezervnih kopija direktno na skladi\u0161nu lokaciju.<br \/>\n3. CloudSave dinami\u010dki primenjuje WORM API pozive (npr. <code>PutObjectRetention<\/code>) na nivou svakog objekta, savr\u0161eno uskla\u0111uju\u0107i trajanje zaklju\u010davanja skladi\u0161ta sa rasporedom zadr\u017eavanja definisanim politikom.<br \/>\n4. Ako napada\u010d kompromituje CloudSave konzolu za upravljanje, i dalje ne mo\u017ee izbrisati rezervne kopije, jer zaklju\u010davanje usagla\u0161enosti sprovodi osnovna infrastrukturna skladi\u0161na tehnologija, a ne softver za rezervne kopije.<\/p>\n<h2>Najbolje prakse za nepromenljive arhive baza podataka<\/h2>\n<p>Da biste osigurali da je va\u0161a nepromenljiva arhitektura zaista otporna, pridr\u017eavajte se slede\u0107ih in\u017eenjerskih najboljih praksi:<\/p>\n<h3>1. Stroga NTP sinhronizacija<\/h3>\n<p>Nepromenljiva zaklju\u010davanja su matemati\u010dki vezana za vremenske oznake. Ako je NTP (Network Time Protocol) servis na va\u0161em skladi\u0161nom nizu ili serveru za rezervne kopije kompromitovan ili odstupa, to mo\u017ee uzrokovati prevremeno isticanje zaklju\u010davanja ili da ona nikada ne isteknu. Osigurajte da va\u0161a skladi\u0161na infrastruktura koristi autentifikovane, redundantne NTP izvore.<\/p>\n<h3>2. Izolacija IAM uloga i akreditiva<\/h3>\n<p>Akreditive koji se koriste za pisanje u nepromenljivi bucket moraju imati samo <code>s3:PutObject<\/code> i <code>s3:PutObjectRetention<\/code> dozvole. Oni <strong>nikada<\/strong> ne smeju imati <code>s3:DeleteObject<\/code> ili <code>s3:PutBucketObjectLockConfiguration<\/code> dozvole.<\/p>\n<p>Primer IAM politike sa najmanjim privilegijama za agenta rezervnih kopija baze podataka:<\/p>\n<pre><code class=\"language-json\">{\n    &quot;Version&quot;, &quot;2012-10-17&quot;,\n    &quot;Statement&quot;: [\n        {\n            &quot;Effect&quot;: &quot;Allow&quot;,\n            &quot;Action&quot;: [\n                &quot;s3:PutObject&quot;,\n                &quot;s3:GetBucketObjectLockConfiguration&quot;\n            ],\n            &quot;Resource&quot;: [\n                &quot;arn:aws:s3:::prod-db-archive-immutable&quot;,\n                &quot;arn:aws:s3:::prod-db-archive-immutable\/*&quot;\n            ]\n        }\n    ]\n}\n<\/code><\/pre>\n<h3>3. Odre\u0111ivanje perioda zadr\u017eavanja<\/h3>\n<p>Ne postavljajte zaklju\u010davanja usagla\u0161enosti na preduge periode (npr. 7 godina za usagla\u0161enost) na va\u0161em primarnom nivou za brzi oporavak. Baze podataka generi\u0161u ogromne koli\u010dine WAL\/transakcionih log podataka. Zaklju\u010davanje ovih podataka godinama \u0107e rezultirati eksponencijalnim rastom tro\u0161kova skladi\u0161tenja.<br \/>\nUmesto toga, koristite vi\u0161eslojni pristup:<br \/>\n*   <strong>Nivo operativnog oporavka:<\/strong> 14 do 30 dana nepromenljivog zadr\u017eavanja za pune kopije i logove.<br \/>\n*   <strong>Nivo dugoro\u010dnog arhiviranja:<\/strong> Mese\u010dne pune rezervne kopije preme\u0161tene u Glacier\/Deep Archive sa Vault Lock-om na 1-7 godina.<\/p>\n<h3>4. Redovno testiranje oporavka u izolovanim VPC-ovima<\/h3>\n<p>Nepromenljivost garantuje da se podaci ne mogu izbrisati, ali ne garantuje da su podaci bez logi\u010dke korupcije. Morate automatizovati restauraciju va\u0161ih nepromenljivih arhiva baza podataka u izolovani, vazdu\u0161no odvojeni (air-gapped) VPC ili VLAN. Pokrenite <code>DBCC CHECKDB<\/code> (SQL Server) ili <code>pg_amcheck<\/code> (PostgreSQL) na restauriranim podacima da biste potvrdili strukturni integritet.<\/p>\n<h2>Zaklju\u010dak<\/h2>\n<p>Odbrana od ransomware-a je ve\u017eba u pretpostavci proboja. Do trenutka kada se aktivira upozorenje u va\u0161em SIEM-u, napada\u010di su verovatno ve\u0107 poku\u0161ali da kompromituju va\u0161u infrastrukturu za rezervne kopije. Projektovanjem arhiva va\u0161ih baza podataka kori\u0161\u0107enjem nepromenljivog skladi\u0161ta u re\u017eimu usagla\u0161enosti, oduzimate napada\u010dima njihovu glavnu polugu. Bez obzira da li koristite izvorne API-je u oblaku, ZFS zadr\u0161ke ili enterprise platformu za orkestraciju kao \u0161to je CloudSave, implementacija WORM skladi\u0161ta vi\u0161e nije opciona\u2014to je obavezan stub moderne administracije baza podataka i oporavka od katastrofa.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"Immutable Database Storage to Defeat Ransomware","rank_math_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","rank_math_focus_keyword":"immutable database storage","footnotes":""},"categories":[663],"tags":[4745,4746,4747,1351,4748,4749],"class_list":["post-6399","post","type-post","status-publish","format-standard","hentry","category-database-backup","tag-3-2-1-1-backup","tag-data-survivability","tag-database-archives","tag-enterprise-backup","tag-immutable-storage","tag-ransomware-protection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Immutable Database Storage to Defeat Ransomware<\/title>\n<meta name=\"description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/\" \/>\n<meta property=\"og:locale\" content=\"sr_RS\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Arhitektura nepromenljivog skladi\u0161ta za arhive baza podataka radi za\u0161tite od rensomvera\" \/>\n<meta property=\"og:description\" content=\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/\" \/>\n<meta property=\"og:site_name\" content=\"CloudSave\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-19T13:54:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-19T14:21:02+00:00\" \/>\n<meta name=\"author\" content=\"shervinrv\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043e\u0434\" \/>\n\t<meta name=\"twitter:data1\" content=\"shervinrv\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u041f\u0440\u043e\u0446\u0435\u045a\u0435\u043d\u043e \u0432\u0440\u0435\u043c\u0435 \u0447\u0438\u0442\u0430\u045a\u0430\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 \u043c\u0438\u043d\u0443\u0442\u0430\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/knowledge-base\\\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/knowledge-base\\\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\\\/\"},\"author\":{\"name\":\"shervinrv\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"headline\":\"Arhitektura nepromenljivog skladi\u0161ta za arhive baza podataka radi za\u0161tite od rensomvera\",\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T14:21:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/knowledge-base\\\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\\\/\"},\"wordCount\":1456,\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"keywords\":[\"3-2-1-1 backup\",\"data survivability\",\"database archives\",\"Enterprise Backup\",\"immutable storage\",\"ransomware protection\"],\"articleSection\":[\"Database Backup\"],\"inLanguage\":\"sr-RS\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/knowledge-base\\\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\\\/\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/knowledge-base\\\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\\\/\",\"name\":\"Immutable Database Storage to Defeat Ransomware\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/#website\"},\"datePublished\":\"2026-06-19T13:54:43+00:00\",\"dateModified\":\"2026-06-19T14:21:02+00:00\",\"description\":\"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/knowledge-base\\\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\\\/#breadcrumb\"},\"inLanguage\":\"sr-RS\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cloudsave.app\\\/sr\\\/knowledge-base\\\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/knowledge-base\\\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Arhitektura nepromenljivog skladi\u0161ta za arhive baza podataka radi za\u0161tite od rensomvera\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/#website\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/\",\"name\":\"CloudSave\",\"description\":\"CloudSave\",\"publisher\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sr-RS\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/#\\\/schema\\\/person\\\/286beefe68281d868e87f46603a7ae4d\",\"name\":\"shervinrv\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sr-RS\",\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"url\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"contentUrl\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\",\"width\":859,\"height\":150,\"caption\":\"shervinrv\"},\"logo\":{\"@id\":\"https:\\\/\\\/cloudsave.app\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Logo_Name-2.png\"},\"sameAs\":[\"http:\\\/\\\/cloudsave.app\"],\"url\":\"https:\\\/\\\/cloudsave.app\\\/sr\\\/knowledge-base\\\/author\\\/shervinrv\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Immutable Database Storage to Defeat Ransomware","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/","og_locale":"sr_RS","og_type":"article","og_title":"Arhitektura nepromenljivog skladi\u0161ta za arhive baza podataka radi za\u0161tite od rensomvera","og_description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","og_url":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/","og_site_name":"CloudSave","article_published_time":"2026-06-19T13:54:43+00:00","article_modified_time":"2026-06-19T14:21:02+00:00","author":"shervinrv","twitter_card":"summary_large_image","twitter_misc":{"\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043e\u0434":"shervinrv","\u041f\u0440\u043e\u0446\u0435\u045a\u0435\u043d\u043e \u0432\u0440\u0435\u043c\u0435 \u0447\u0438\u0442\u0430\u045a\u0430":"9 \u043c\u0438\u043d\u0443\u0442\u0430"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/#article","isPartOf":{"@id":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/"},"author":{"name":"shervinrv","@id":"https:\/\/cloudsave.app\/sr\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"headline":"Arhitektura nepromenljivog skladi\u0161ta za arhive baza podataka radi za\u0161tite od rensomvera","datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T14:21:02+00:00","mainEntityOfPage":{"@id":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/"},"wordCount":1456,"publisher":{"@id":"https:\/\/cloudsave.app\/sr\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"keywords":["3-2-1-1 backup","data survivability","database archives","Enterprise Backup","immutable storage","ransomware protection"],"articleSection":["Database Backup"],"inLanguage":"sr-RS"},{"@type":"WebPage","@id":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/","url":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/","name":"Immutable Database Storage to Defeat Ransomware","isPartOf":{"@id":"https:\/\/cloudsave.app\/sr\/#website"},"datePublished":"2026-06-19T13:54:43+00:00","dateModified":"2026-06-19T14:21:02+00:00","description":"** Learn how to protect enterprise database archives from ransomware using immutable storage. Discover technical implementation steps for AWS S3 Object Lock, ZFS, PostgreSQL, and SQL Server.","breadcrumb":{"@id":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/#breadcrumb"},"inLanguage":"sr-RS","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cloudsave.app\/sr\/knowledge-base\/arhitektura-nepromenljivog-skladi%c5%a1ta-za-arhive-baza-podataka-radi-za%c5%a1tite-od-rensomvera\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cloudsave.app\/sr\/"},{"@type":"ListItem","position":2,"name":"Arhitektura nepromenljivog skladi\u0161ta za arhive baza podataka radi za\u0161tite od rensomvera"}]},{"@type":"WebSite","@id":"https:\/\/cloudsave.app\/sr\/#website","url":"https:\/\/cloudsave.app\/sr\/","name":"CloudSave","description":"CloudSave","publisher":{"@id":"https:\/\/cloudsave.app\/sr\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cloudsave.app\/sr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sr-RS"},{"@type":["Person","Organization"],"@id":"https:\/\/cloudsave.app\/sr\/#\/schema\/person\/286beefe68281d868e87f46603a7ae4d","name":"shervinrv","image":{"@type":"ImageObject","inLanguage":"sr-RS","@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","url":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","contentUrl":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png","width":859,"height":150,"caption":"shervinrv"},"logo":{"@id":"https:\/\/cloudsave.app\/wp-content\/uploads\/2026\/02\/Logo_Name-2.png"},"sameAs":["http:\/\/cloudsave.app"],"url":"https:\/\/cloudsave.app\/sr\/knowledge-base\/author\/shervinrv\/"}]}},"_links":{"self":[{"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/posts\/6399","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/comments?post=6399"}],"version-history":[{"count":1,"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/posts\/6399\/revisions"}],"predecessor-version":[{"id":6459,"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/posts\/6399\/revisions\/6459"}],"wp:attachment":[{"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/media?parent=6399"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/categories?post=6399"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudsave.app\/sr\/wp-json\/wp\/v2\/tags?post=6399"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}