You can choose to automate your backup workflow for Amazon EC2 resources with backup policies. A backup policy specifies the backup schedule and retention criteria for backup jobs. AWS Workloads then initiates backups of the Amazon EC2 instances and stores them in the region specified in the policy, based on the retention criteria defined.
Manually configure Amazon EC2 resources for airgap backup
Use manual backup configuration to selectively protect specific Amazon EC2 resources. As a part of manual configuration, you can select an EC2 instance and assign a backup policy to them. Once configured, your Amazon EC2 backup sets are configured based on the schedule and retention configured in the backup policy.
Before you begin
Verify Prerequisites to ensure access to your AWS environment:
Ensure your Amazon EC2 resources are discovered and available on the EC2 listing page with a Backup Protection Status of Unprotected.
Configure Storage Rules and add Encryption for e-key management.
Procedure
To manually configure your Amazon EC2 resources for airgap backup:
Log in to the AWS Workloads Management Console. Click EC2 on the left pane and navigate to the Resources tab.
Select an EC2 instance and click Configure Policy.
On the Configure Policy dialog, Select a Policy to configure the EC2 instance with an existing Backup Policy.
Note: AWS Workloads offers a simplified approach to backup policies, with options to define one or more policies to automate your backup schedule and retention for EC2 backups to Druva Cloud.Click Confirm.
The backup set is now created and configured for backup.
Manage Backup Sets
To view backup sets created EC2 resources:
Log in to the AWS Workloads Management Console.
Click EC2 on the left pane and navigate to the Backup Sets tab.
Alternatively to view backup sets for a specific EC2 resource, select the Resource Name from the Resources page. All associated backup sets for the selected resource are available under the Summary tab.
You can filter backup sets by Policy or by Last Backup Status.Select a backup set to view all associated recovery points.
Delete backup sets
Deleting backup sets is essential when you plan to delete an Amazon EC2 instance from your management console.
When you delete a backup set:
The backup policy which was linked with the backup set is detached.
The backups occurring through the backup set are stopped.
The snapshots backed up using the backup set are deleted.
📝 Notes
To preserve the Amazon EC2 data, you can restore backups and then proceed with the deletion of backup sets.
The retention period is not honoured for the most recent snapshot when backups for an Amazon EC2 resource is disabled. This allows you to restore the latest backup at a later point, if required.
To delete a backup set:
Log in to the AWS Workloads Management Console and click EC2 on the left pane.
Navigate to the Backup Sets tab, and select the backup set to be deleted.
On the Summary page, click Delete.
A confirmation dialog displays. Click Delete Backup Set to proceed.
Delete Amazon EC2 recovery points
If you are a cloud administrator, you can delete warm recovery points of Amazon EC2 instances that you no longer require.
Once you delete a recovery point, Druva purges the recovery point data from the warm storage, thus freeing up the storage space.
📝 Note
You cannot delete the most-recent recovery points of an Amazon EC2 resource. However, all recovery points get compacted according to the retention period defined in the backup policy.
To delete a recovery point:
Log in to the AWS Workloads Management Console and click EC2 on the left pane.
Navigate to the Backup Sets tab, and select a backup set.
The Recovery Points tab lists all the recovery points for this backup set. Click the Filters icon to filter the displayed recovery points. You can filter the EC2 recovery points by Storage Region or using Tags .
Select a recovery point that you want to delete, and then click Delete. This deletes the recovery point from the storage and frees up space.
A confirmation dialog displays with details on snapshots selected for deletion and the Estimated Deletion Date. Enter Delete and then click Confirm, Delete to proceed.
📝 Note
The most recent recovery point of a backup set cannot be deleted. However, all recovery points get compacted according to the retention period defined in the backup policy.
Recover critical backups from accidental deletion with Rollback Actions
Disabling an Amazon EC2 backup configuration deletes the backup set and all corresponding recovery points. However, if you have the Rollback Actions feature enabled, you can recover the deleted recovery points within a configurable rollback window.
Once configured, the deleted recovery points will remain available for rollback for a specific period, post which they are permanently deleted. Administrators can revert malicious or unintended deletes without any loss of data. If your Amazon EC2 recovery points have been intentionally removed, the backup copies will be permanently deleted post the rollback window, and these EC2 resources can then be reconfigured for backup. For more information, see Rollback Actions.
📝 Note
To configure Rollback Actions, you will need the Security Essentials license. To activate the license, contact Support.