[dsgrillo]

My experience says to backup to a different vendor.

[physicles]

This is part of my threat model. Is there an easy way to do this with e.g. hosted RDS or block storage device snapshots?

[dsgrillo]

In my case I'm dumping + zipping the entire database at the application level. In my case is as simple as adding a library [1], scheduling the job and transferring to AWS S3 (my main application is on DigitalOcean)

[1] https://github.com/spatie/laravel-backup