AWS Prescriptive Guidance Backup and recovery approaches on AWS AWS Prescriptive Guidance Backup and recovery approaches on AWS AWS Prescriptive Guidance: Backup and recovery approaches on AWS Copyright © Amazon Web Services, Inc. and/or its affiliates. All rights reserved. Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by Amazon. AWS Prescriptive Guidance Backup and recovery approaches on AWS Table of Contents Introduction ...................................................................................................................................... 1 Why use AWS as a data-protection platform? ................................................................................ 1 Targeted business outcomes ................................................................................................................ 3 Choosing AWS services ....................................................................................................................... 4 Designing a backup and recovery solution ............................................................................................. 6 Amazon S3 and Amazon S3 Glacier ...................................................................................................... 7 Amazon S3 ................................................................................................................................ 7 Standard S3 buckets ........................................................................................................... 8 Maintain rollback history ..................................................................................................... 8 Customized configuration files ............................................................................................. 8 Custom backup and restore ................................................................................................. 8 Amazon S3 Glacier ..................................................................................................................... 9 Using Amazon S3 Lifecycle object transition .......................................................................... 9 Securing backup data ............................................................................................................... 10 Backup and recovery for Amazon EC2 with EBS volumes ....................................................................... 11 Amazon EC2 backup and recovery .............................................................................................. 12 Separate server volumes ................................................................................................... 12 AMIs or snapshots ............................................................................................................ 13 Instance store volumes ..................................................................................................... 13 Tagging and enforcing standards ....................................................................................... 14 Create EBS volume backups ....................................................................................................... 14 Preparing an EBS volume .................................................................................................. 15 Creating snapshots from the console .................................................................................. 16 Creating AMIs .................................................................................................................. 16 Amazon Data Lifecycle Manager ......................................................................................... 17 AWS Backup .................................................................................................................... 17 Multi-volume backups ....................................................................................................... 18 Automating snapshot and AMI creation ............................................................................... 19 Restoring from a snapshot or AMI .............................................................................................. 19 Restoring from a snapshot ................................................................................................ 20 Restoring from an AMI ...................................................................................................... 21 Backup and recovery from on-premises infrastructure to AWS ................................................................ 22 File gateway ............................................................................................................................ 22 Volume gateway ...................................................................................................................... 23 Tape gateway .......................................................................................................................... 23 Backup and recovery of applications ................................................................................................... 25 Cloud-native AWS services ................................................................................................................. 26 Amazon RDS ............................................................................................................................ 26 Using DNS CNAME ........................................................................................................... 27 DynamoDB .............................................................................................................................. 27 Hybrid architectures ......................................................................................................................... 29 Moving centralized backup management solutions ....................................................................... 29 Disaster recovery with AWS ............................................................................................................... 31 On-premises DR to AWS ........................................................................................................... 31 DR for cloud-native workloads ................................................................................................... 32 DR in a single Availability Zone .......................................................................................... 33 DR in a regional failure ..................................................................................................... 33 Cleaning up backups ......................................................................................................................... 34 Backup and recovery FAQ .................................................................................................................. 35 What backup schedule should I select? ....................................................................................... 35 Do I need to create backups in my development accounts? ............................................................ 35 Next steps ....................................................................................................................................... 36 Additional resources ......................................................................................................................... 37 Document history ............................................................................................................................. 38 iii AWS Prescriptive Guidance Backup and recovery approaches on AWS Why use AWS as a data-protection platform? Backup and recovery approaches on AWS Khurram Nizami, Consultant, AWS Professional Services July 2020 (last update (p. 38): September 2021) This guide discusses how to implement backup and recovery approaches using Amazon Web Services (AWS) services for on-premises, cloud-native, and hybrid architectures. These approaches offer lower costs, higher scalability, and more durability to meet recovery time objective (RTO), recovery point objective (RPO), and compliance requirements. This guide is intended for technical leaders who are responsible for protecting data in their corporate IT and cloud environments. This guide covers different backup architectures (cloud-native applications, hybrid, and on-premises environments). It also covers associated Amazon Web Services (AWS) services that can be used to build scalable and reliable data-protection solutions for the non-immutable components of your architecture. Another approach is to modernize your workloads to use immutable architectures, reducing the need for backup and recovery of components. AWS provides a number of services to implement immutable architectures and reduce the need for backup and recovery, including: • Serverless with AWS Lambda • Containers with Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Kubernetes Service (Amazon EKS), and AWS Fargate • Amazon Machine Images (AMIs) with Amazon Elastic Compute Cloud (Amazon EC2) As the growth of enterprise data accelerates, the task of protecting it becomes more challenging. Questions about the durability and