2 replies to this topic

[Jeremy Trask]

Hi HelpSpa

Thanks for your enquiry concerning BackupBuddy.

1) yes, for Dropbox you can specify a directory for a destination and for S3 you can specify a bucket and a "directory" (of course it isn't actually a directory in the real sense but can be considered as such). Also a site can have multiple destinations defined of the same and/or different types.

2) For Dropbox each site should be separately authenticated with Dropbox and each site stores the necessary authentication tokens and not the login credentials. Please consider though that Dropbox is inherently a "single-user" solution so there are no security measures (that I know of) that enable you to "ring-fence" particular directories. Having authenticated access to the Dropbox account storage means that a "curious" client could in theory try and access directories other than that initially configured (this isn't anything to do with BackupBuddy but merely the way Dropbox access works).

For the kind of application you are describing I would suggest that S3 would be a better choice as you can use the IAM dashboard to create specific client identities and access credentials and then create client specific S3 buckets (and directories therein as required) with user and/or bucket policies to control what each specific identity can access and you can also rescind the access credentials at any time. This approach means that your main login credentials for the S3 account are _never_ revealed and you retain much more control over each client and their backup storage. You will be able to get more information about IAM, user policies, etc. from AWS documentation and the BackupBuddy forum is there for you to get additional BackupBuddy specific advice.

Regards...jeremy