CODEWITHSUNDEEP
mongodbbackup
Taiyr Begeyev
Taiyr Begeyev

Reputation: 627

MongoDB Backups: Expire Data from Collections by Setting TTL

I have read the MongoDB's official guide on Expire Data from Collections by Setting TTL. I have set everything up and everything is running like clockwork.

One of the reasons why I have enabled the TTL is because one of the product's requirements is to auto-delete a specific collection. Well, the TLL handles it quite well. However, I have no idea if the data expiration will also persist on the MongoDB backups. The data is also supposed to be automatically deleted from the backups. In case the backups get leaked or restored, the expired data shouldn't be there.

Upvotes: 0

Views: 278

Answers (2)

Wernfried Domscheit
Wernfried Domscheit

Reputation: 59456

As mentioned by @D.SM data is not deleted from backup. One solution could be to encrypt your data, e.g. with Client-Side Field Level Encryption

For every day use a new encryption key for your data. When your data should expire, drop according encryption key from your password storage. With this your data becomes unusable, even if somebody restores the data from an old backup.

Upvotes: 1

D. SM
D. SM

Reputation: 14490

Backup contains the data that was present in the database at the time of the backup.

Once a backup is made, it's just a bunch of data that sits somewhere without being touched. The documents that have been deleted since the backup was taken are still in the backup (arguably this is the point of the backup to begin with).

If you want to expire data from backups, the normal solution is to delete backups older than a certain age.

Upvotes: 2

Related Questions