Disable Backup Downloads in the a9s Service Dashboard

This section describes how the backup downloads can be disabled in the a9s Service Dashboard.

Disabling Backup Downloads

You can disable backup downloads using the Ops file disable-backup-download.yml. This will disable both backup downloads and the Set Encryption Key option in the a9s Service Dashboard. This change will only affect the a9s Service Dashboard and the a9s Public API endpoint. It will not affect the functionality of other components.

After applying the Ops file it will still be possible to set the encryption key using the prepare-disaster-recovery API endpoint or the disaster recovery Cloud Foundry CLI plugin.

Changing Encryption Keys When Backup Download is Disabled

Each Service Instance has only one encryption key, which can be updated via the a9s Service Dashboard, the a9s Public API, or Disaster Recovery CF CLI plugin. It is not possible to completely disable the ability of the Application Developer to configure the encryption key, because this is necessary for the Disaster Recovery feature.

Updating the encryption key using the Disaster Recovery endpoint or CF CLI plugin will affect the backups of the related Service Instance, just as it would be if the encryption key were set using the a9s Service Dashboard. This can cause some operational issues, especially if there are multiple Platform Operators working on a team. Thus, such changes must be made with this in consideration.