cloud-drlisted
Install: claude install-skill ecoma-io/touchstone
# Cloud Disaster Recovery
Disaster recovery is the plan for when the plan fails — restoring service after a catastrophic event.
## RPO and RTO
Recovery Point Objective is how much data you are willing to lose (measured in time: 5 minutes, 1 hour, 24 hours). Recovery Time Objective is how long you are willing to be down. These are business decisions, not engineering decisions. The engineering task is to make them true — and to measure them regularly. An untested RTO is a wish.
## Backup strategy
Automate backups. Encrypt backups. Replicate backups to a different region. Test restoration from backups quarterly. A backup that has never been restored is not a backup — it is a hope. The restore process must be documented in a runbook that a sleep-deprived engineer can follow at 3 AM.
## Recovery architectures
Pilot light: minimal infrastructure running, scale up during failover (lowest cost, slowest recovery). Warm standby: scaled-down but functional, scale up during failover (moderate cost, moderate recovery). Multi-site active-active: full capacity in multiple regions, route traffic away from failure (highest cost, fastest recovery). The choice is dictated by RTO and budget, not by architecture preference.
## Failover testing
Run a game day. Simulate a region outage. Simulate a database corruption. Simulate a credentials leak. The team that has never practiced failover will fail at failover. Chaos engineering is not about breaking things — it is about knowing what break