Storage architecture
On this page 9 topics
Overview
Topics
- Object
- block
- file
- backup
- lifecycle policies
Learn first
2.5 h of practice (estimate)
Learning outcomes
- Choose object, block, or file storage per use case.
- Design backup strategy, retention, and immutability for ransomware resilience.
- Apply lifecycle policies and storage tiers to control cost.
- Protect stored data with encryption and access controls.
Lessons
Lab and exercises
Lab
ARC-015-LAB1 · Larkspur storage design
Outcomes: 1–4 · Time: ~2.5 h
- Inventory the data sets: product images, invoices, logs, database and file backups.
- Choose storage type per data set.
- Define lifecycle rules, retention periods, and backup and restore-test schedule.
- Define encryption, key ownership, and access roles.
- Show how backup copies are isolated from production credentials.
Acceptance: retention meets requirements; backup copies are isolated from production credentials.
Exercises (case-based; six exercises)
| ID | Outcome | Task |
|---|---|---|
| ARC-015-EX01 | 1 | Choose object, block, or file storage for: product images, the order database volume, a shared folder used by a legacy label printer tool. |
| ARC-015-EX02 | 2 | Ransomware encrypts production and deletes backups in the same account. Redesign the backup path. |
| ARC-015-EX03 | 2 | Define retention for invoices (assume seven years), logs (assume one year), and order exports; state the assumptions. |
| ARC-015-EX04 | 3 | Write lifecycle rules for application logs and estimate qualitatively the cost effect. |
| ARC-015-EX05 | 4 | Review a bucket with public read access and no encryption; list the fixes. |
| ARC-015-EX06 | 4 | Decide provider-managed versus customer-managed keys for invoices and justify. |
Show solutions
- EX01 Images: object; database volume: block; shared folder: file (or modernize the tool to use object storage).
- EX02 Copy backups to a separate account with separate credentials, immutable retention, and no delete rights for production roles; test restore from that copy.
- EX03 Invoices: seven years with retention lock; logs: one year with tiering; exports: shortest period required by finance. State that legal confirms the numbers.
- EX04 Hot for 30 days, infrequent access for 90, archive to the retention end, delete afterwards; storage cost falls because most data sits in cheaper tiers; verify retrieval fees before recording.
- EX05 Block public access, serve via CDN with controlled access if needed, enable encryption and versioning, restrict roles, enable access logging.
- EX06 Customer-managed keys for invoices when audit demands key control and revocation; accept the added operating work; provider-managed is fine for non-sensitive media.
Workplace evidence: a storage or backup design you implemented.
Outcome coverage: all outcomes covered by exercises and the lab.
Quiz
Outcomes: O1 storage types · O2 backups and immutability · O3 lifecycle and tiers · O4 securing stored data.
A self-check for you: nothing is graded, saved or sent anywhere. Choose an answer, then check it. You can try again as often as you like.
Practical part
Design review of the ARC-015-LAB1 storage design plus exercises ARC-015-EX01 to EX06. Pass: quiz at least 8/10, at least five of six exercises correct, retention matching requirements, and backups isolated from production credentials.
Common mistakes
Backups in the same account with the same credentials; no lifecycle rules.
Assessment
Design review.
Workplace evidence
A storage or backup design you implemented.
Career relevance
HA/DR (ARC-019) and data governance (ARC-030).