i'm looking at restic
it can use s3 as a backend. that's cool. let's say i don't want a compromised machine to be able to delete backups, so i will follow the principle of least privilege to set up access for it
does restic documentation give me the set of permissions it requires? absolutely the fuck not
why can people not make good backup software.