AWS Backup Service — Use Cases

AWS Backup Service is fully managed service from AWS to automate backup for majority of AWS services. Earlier we had to define the backup strategy for each of the AWS service on our own and it was an arduous task in itself. With AWS Backup we can manage backup for all the services mentioned below in one click from Console/API/CLI.

Follow AWS documentation for more details for services covered under AWS Backup Service and its features.

In this blog we will discuss the design for below use cases for AWS Backup in detail.

1. USE CASE-1 — Backup and restore with in the same region & same account.
2. USE CASE-2 — Backup and restore with in different region but same account.
3. USE CASE-3 — Backup and restore with in different region but same account. Also, cross account backup copy in central backup account.

USE CASE-1 — Backup and restore with in the same region & same account

Backup and restore with in the same region & same account

Backup steps:

Primary region

1. Create encryption key for backup vault for each service class in primary region using KMS key.

2. Create primary backup vault in primary region.

3. Create backup plan with required configuration for each application service class.

4. Add resources to backup plan using Service class tag for each service class.

Restore Steps:

1. From the Backup vault select the resource recovery point and select restore option.

2. Provision the fresh resources while restoring with different name.

USE CASE-2 — Backup and restore with in different region but same account

Backup and restore with in different region but same Account

Backup steps:

Primary region

1. Create encryption key for backup vault for each service class in primary region using KMS key.

2. Create primary backup vault in primary region.

3. Create backup plan with required configuration for each application service class.

4. Add resources to backup plan using Service class tag for each service class.

Recovery region

5. Create encryption key for destination backup vault for each service class in recovery region using KMS key.

6. Create recovery backup vault in recovery region.

Primary region

7. Specify the recovery vault and region name in the primary region backup plan.

Restore Steps:

1. From the Backup vault select the resource recovery point and select restore option.

2. Provision the fresh resources while restoring with different name.

USE CASE-3 — Backup and restore with in different region but same account. Also, cross account backup copy in central backup account

Backup and restore with in different region but same account. Also, cross account backup copy in central backup account.

Backup steps:

Primary region

1. Create encryption key for backup vault for each service class in primary region using KMS key.

2. Create primary backup vault in primary region.

3. Create backup plan with required configuration for each application service class.

4. Add resources to backup plan using Service class tag for each service class.

Recovery region

5. Create encryption key for destination backup vault for each service class in recovery region using KMS key.

6. Create recovery backup vault in recovery region.

Backup Recovery account

7. Create encryption key for destination backup vault for each service class in cross account using KMS key.

8. Create recovery backup vault in cross account.

Primary region

9. Specify the recovery vault and region name in the primary region backup plan incase recovery vault is in different account

Restore Steps:

1. From the Backup vault select the resource recovery point and select restore option.

2. Provision the fresh resources while restoring with different name.