Home > Data Protection > Data Protection (general) > Dell PowerProtect Data Domain Retention Lock > Apex Protection Storage hardening recommendations
When the DDVE is deployed on-cloud, the public cloud management console represents the only interface available to manage the PPDDVE infrastructure including virtual instance, networking, and object storage. Proper access controls are required to restrict cloud resource modifications that impact the overall DDVE operation.
The following are some recommendations to secure the public cloud management console to enforce proper DDVE RL operation in compliance edition:
RL-C is not the same as cloud object locking. When deduped, data is secured by retention lock functionality, and segments inside each object can be shared by multiple backup files, each with their respective retention duration and policy requirements. If object storage enables object locking capabilities, it significantly impacts the functionality and performance of PPDD and potentially increases the cloud capacity costs.