REL 9: How do you back up data?

Back up data, applications, and configuration to meet your requirements for recovery time objectives (RTO) and recovery point objectives (RPO).

Resources

What Is AWS Backup?
AWS re:Invent 2019: Deep dive on AWS Backup, ft. Rackspace (STG341)
Well-Architected lab: Level 200: Testing Backup and Restore of Data
Amazon S3: Protecting Data Using Encryption
Encryption for Backups in AWS
On-demand backup and restore for DynamoDB
EFS-to-EFS backup
AWS Marketplace: products that can be used for backup
APN Partner: partners that can help with backup

Best Practices:

Improvement Plan

Identify and back up all data that needs to be backed up, or reproduce the data from sources

  • Understand and use the backup capabilities of the AWS services and resources used by your workload: AWS provides capabilities to back up your workload data
    What Is AWS Backup?
    Well-Architected lab: Level 200: Testing Backup and Restore of Data
    Creating a DB Snapshot
    Amazon EBS Snapshots
    On-Demand Backup and Restore for DynamoDB
    Creating a DB Cluster Snapshot in Neptune
    Cross-Region Replication
    Working with Amazon Elasticsearch Service Index Snapshots
    Backup and Restore for ElastiCache for Redis
    Backing Up Amazon EFS
    Exporting Log Data to Amazon S3
  • Take snapshots of your encrypted Amazon EC2 EBS volumes: You can back up the data on your Amazon EBS volumes to Amazon S3 by taking point-in-time snapshots. Snapshots are incremental backups, which means that only the blocks on the device that have changed after your most recent snapshot are saved. Set up snapshot schedules and retention policies that meet your requirements.
  • Replicate your Amazon EFS file systems: AWS does not take snapshots of Amazon EFS file systems by default. Set up snapshot schedules and retention policies that meet your requirements.
  • Take snapshots of your encrypted Amazon RDS instances: By default, AWS takes a snapshot each day and retains it for that day. Set up snapshot schedules and retention policies that meet your requirements.
  • Take snapshots of your Amazon DynamoDB tables: AWS does not take snapshots of DynamoDB tables by default. Set up snapshot schedules and retention policies that meet your requirements.
  • Copy the log files in CloudWatch Logs to Amazon S3 for retention and archiving: AWS stores CloudWatch Logs log files for as long as you specify in your retention policy. If you need the logs longer for analytics, forensics, and archiving, you can export them to Amazon S3.
    Exporting log data to Amazon S3
  • Secure and encrypt backups

  • Use encryption on each of your data stores: If your source data is encrypted, then the backup will also be encrypted.
  • Implement least privilege permissions to access your backups: Follow best practices to limit the access to the backups, snapshots, and replicas in accordance with security best practices.
    Security Pillar: AWS Well-Architected
  • Perform data backup automatically

  • Use AWS Backup to schedule your backups of services they support.: AWS Backup is a fully managed backup service that makes it easy to centralize and automate the backup of data across AWS services in the cloud and on premises.
    What Is AWS Backup?
    AWS re:Invent 2019: Deep dive on AWS Backup, ft. Rackspace (STG341)
  • Create a EventBridge Event that invokes a Step Function State Machine to perform your backups.: You can create a State Machine in AWS Step Functions that coordinates your backups.
    Creating an EventBridge Rule That Triggers on a Schedule
    What Is AWS Step Functions?
    Amazon States Language
  • Perform periodic recovery of the data to verify backup integrity and processes

  • Include restoration in the automation of your backups.: You can extend your State Machine in AWS Step Functions to perform the restoration of each of the systems that you perform a backup.
    Creating an EventBridge Rule That Triggers on a Schedule
    What Is AWS Step Functions?
    Amazon States Language