---
name: framework-financial-services-satellite-architecture-storage
title: Storage for Satellite reference architecture
description: You need to consider storage options both in IBM Cloud and in the on-premises Satellite location.
last-updated: 2024-11-19
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/framework-financial-services?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Storage for Satellite reference architecture
{: #satellite-architecture-storage}

You need to consider storage options both in IBM Cloud and in the on-premises Satellite location.
{: shortdesc}

## Storage in IBM Cloud
{: #satellite-architecture-storage-ibm-cloud}

All Satellite control plane data is backed up to an [IBM Cloud Object Storage](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-about-cloud-object-storage&format=markdown) service instance within IBM Cloud. This is done so that your location can be restored after a disaster. When you create a location, you also provide a Object Storage service instance that you control for backup of the location control plane worker nodes. Control plane master data is backed up by IBM and stored in an IBM-owned Object Storage instance. Satellite cluster master data is backed up to the Object Storage instance that you own.

Aside from backing up data from the Satellite location, Object Storage is also used to store auditable IBM Cloud events. For more information, see [Audit logging of IBM Cloud events](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-audit&format=markdown).

### About Object Storage
{: #satellite-architecture-storage-ibm-cloud-cos}

[Object Storage](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-about-cloud-object-storage&format=markdown) stores encrypted and dispersed data across multiple geographic locations. Object Storage is available with three types of resiliency: Cross Region, Regional, and Single Data Center. Cross Region provides higher durability and availability than using a single region at the cost of slightly higher latency. Regional service reverses those tradeoffs, and distributes objects across multiple availability zones within a single region. If a given region or availability zone is unavailable, the object store continues to function without impediment. Single Data Center distributes objects across multiple machines within the same physical location.

All Object Storage buckets must be encrypted with KYOK by using keys that are managed by Hyper Protect Crypto Services. For more information, see [Encryption at rest](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-encryption-at-rest&format=markdown). In addition, a geographically separate region should be used as an [alternative storage site](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-bcdr&format=markdown#your-workloads-requirements-alternate-storage-site). This means you should use [cross region resiliency](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-endpoints&format=markdown#endpoints-geo) for all of your Object Storage buckets.
{: important}

To start working with Object Storage, see the following instructions:

- [About Object Storage](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-about-cloud-object-storage&format=markdown)
- [Getting started with Object Storage](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-getting-started-cloud-object-storage&format=markdown)
- [Connecting to Object Storage from VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-connecting-vpc-cos&format=markdown)
- [Encrypting your data](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-encryption&format=markdown)

{{site.data.content.service-description-cloud-object-storage-reference-list}}

## Storage in Satellite location
{: #satellite-architecture-storage-satellite-location}

Within the Satellite location, Satellite storage uses Satellite Config to provide a convenient way to install various storage drivers in Red Hat OpenShift on IBM Cloud clusters, by using storage templates. The storage templates are provided and tested by the vendors. After you install Satellite storage, your cluster users can use Kubernetes persistent volume claims (PVCs) to order and save their application data in persistent storage. For more information, see [Understanding Satellite storage](https://cloud.ibm.com/docs/satellite?topic=satellite-storage-template-ov&format=markdown).

{{site.data.content.encryption-at-rest-in-satellite-location-important}}

## Related controls in IBM Cloud Framework for Financial Services 
{: #related-controls}

More details on some of the major IBM Cloud Framework for Financial Services controls related to storage can be found in the following articles:

- [Encryption at rest](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-encryption-at-rest&format=markdown)
- [Backup and recovery](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-bcdr&format=markdown)

## Next steps
{: #next-steps}

* [Audit logging of IBM Cloud events](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-audit&format=markdown)