Cerberus is a cloud native application, designed to be failure indifferent, self-healing, and highly available.
See the infrastructure overview for more information.
Configuration is stored in S3 and is managed with the CLI. In our preferred configuration, the CLI will store copies of the configuration in two regions for high availability.
Secrets are encrypted using the Key Management Service (KMS) and the ‘AWS Encryption SDK’. Multiple Customer Master Keys (CMKs) are used to ensure multi-region availability of encrypted data.
Amazon Aurora is used in a multiple availability zone configuration.
Backups are automatically setup when a Cerberus environment is provisioned. RDS snapshots are used plus we’ve included a command in our CLI for copying them cross region.