AWS Backup

Table of contents

General

  • AWS Backup is a cost-effective, fully managed, policy-based service that simplifies data protection at scale by centralizing backup automation and management across different AWS Services such as:
    • EC2 / EBS / EFS / FSx;
    • S3;
    • RDS / DocumentDB / Amazon Neptune / DynamoDB;
    • Storage Gateway.
  • Supports on-demand and scheduled backups, cross-account, and cross-region.
  • Supports point-in-time recovery for supported services such as Amazon Aurora.
  • Backup automation can be tag-based.

AWS Backup

Backup Plans

Backup plans are backup policies and basically say what the backup automation will do:

  • Frequency: cron expression of when the backup should be made.
  • Backup Window: what time range is more appropriate to run the backup.
  • Cold Storage Transition: sets when it becomes safe to transition the backup to a lower cost/lower resilience storage (ex. never, days, years, etc.)
  • Retention Period: defines how long it will be required to keep the backup (ex. always, days, months, etc.)
  • Copy to destination: copy the backup to another region.

AWS Backup -> Backup Plan for an AWS Service -> Backup automatically saved to an S3 Bucket.

Backup Vault Lock

  • Enforces write once ready many (WORM) for all the backups stored in the Vault and serves as an additional layer of protection.
  • Not even the root user can delete the backup while it is in the Backup Vault Lock.