Storage Rules help create a mapping between Druva Cloud and your AWS resources within specific Regions and Accounts. Once you identify the AWS resources to be backed up to Druva Cloud, the Storage Rules direct the data backups to the appropriate Druva Cloud Region provisioned within your chosen Account.
In other words, use storage rules to direct specific resource backups to the appropriate Druva Cloud Storage.
📝 Notes
You will need to configure Storage Rules to get started with backing up to Druva Cloud.
A backup policy defined to move backups to Druva Cloud will be executed only when a corresponding Storage Rule is available.
Before you begin
To get started, you will first need to provision storage on Druva Cloud. Once you initiate a storage request, Druva reviews the request, and once complete, the storage on Druva Cloud is provisioned based on your agreed credit limits.
To provision Druva Storage:
Log into your management console and navigate to the Organization for which you wish to set up storage. Click the gear icon on the top navigation bar.
Click Storage Rules and Encryption.
Click Request New Storage on the top right of the Storage Rules tab.
This redirects you to the Storage page on the Enterprise Workloads management console.Click Request New Storage on the Active Storages page.
For detailed instructions, see Provision New Storage for Enterprise Workloads.
📝 Note
You can select the storage type, AWS or Azure, depending on your business requirements. If you are provisioning Azure storage, refer to the regions supported for Azure Cloud storage.
Once you initiate a storage request, Druva reviews the request, and once complete, the storage on Druva Cloud is provisioned. Navigate to the Storage Requests tab on the Enterprise Workloads management console to view all available Cloud Storage with the relevant Status.
Requested: Indicates that a new Storage has been requested and is pending approval. Once approved, the status is updated accordingly.
Provisioned: Indicates that the request has been approved and Cloud Storage has been provisioned in the Region specified.
📝 Note
Once the Cloud Storage requested is provisioned it may take up to an hour for the Status of the available Storage to reflect on your AWS Workloads management console.
Create storage rules
To define storage rules:
Log into your management console and navigate to the Account for which you wish to configure storage rules. Click the gear icon on the top navigation bar.
Click Druva Cloud to be directed to the Druva Storage page.
On the Storage Rules tab, click Add.
Select the Account andAWS Region to filter resources to be backed up from.
Select the Druva Storage name to assign the storage for all backups generated from the resources filtered within the selected Account and Region.
How Storage Rules apply on AWS Workloads (CloudRanger)
A unique Storage mapping takes precedence over mappings set at a broader level, as illustrated by the following scenarios:
Scenario 1: Two storage rules are defined within the same Account ( Account A ), one with All Regions and one with Ireland (EU). In this case, the storage rule with Account A; Ireland (EU) will take precedence over the Account A; All Regions rule.
Scenario 2: A rule set to Account A; All Regions will take precedence over a broader rule defined as All Accounts; All Regions.
📝 Note
Once a storage Region has been defined, pre-existing backups cannot be moved to a new Region.
Manage Cloud Storage
You can select the Cloud Storage to AWS Cloud or Azure Cloud depending on your business requirements.
❗Important
To sign up for this feature and configure Azure Storage, contact Support.
On the Storage Rules tab, click Add to create a new storage rule.
Select the Account and AWS Region to filter resources to be backed up from.
Select the Azure Storage to direct backups generated from resources within the selected Account and Region to your chosen Cloud.
📝 Note
Once the Azure Storage is provisioned, we will continue to support it within the US-East Region.
It is recommended that you select the Cloud Storage native to the existing location of your source instances. All existing backups will remain in the Cloud Storage depending on the Storage Rules defined and the backup configuration.
Delete storage rules
Once defined, you may delete a storage rule, as needed. However, do consider the business implications and storage costs prior to deleting a storage rule associated with an active backup policy.
📝 Note
Once a resource has been backed up to a Storage provisoned on Druva Cloud, the backups will continue to reside within that storage, even if the associated storage rules are modified or deleted.
To delete a storage rule:
Log into your management console and navigate to the Account for which you wish to configure storage rules. Click the gear icon on the top navigation bar.
Click Druva Cloud to be directed to the Druva Storage page.
On the Storage Rules tab, select the storage rule to be deleted. Click Remove.
On the confirmation screen, verify the storage rule that you wish to delete. Click Confirm, delete.
Next steps
Once you define storage rules, proceed with setting up your Client Credentials to enable access to your AWS Key Management System (AWS KMS) to generate and manage the data encryption key (ekey). The ekey once generated is used to encrypt the user data that is then backed up to Druva Cloud. To get started with ekey management, you will need to import the relevant credentials to your AWS Workloads (CloudRanger) account. For more information, see Manage Authorization.
Alternatively, you may want to set up a backup policy to automate your data protection strategy and manage the backup schedules and retention. Once defined, backup policies can be executed across AWS accounts at the organization level and set to Active or disabled, depending on business requirements. For more information, see Setup Policy to Backup to Druva Cloud.