Skip to content

Other

Backup

Use cases
  • Centralise backups across RDS, DynamoDB, EBS, EFS, Storage Gateway
    • Filesystem and file level
    • Backups in the same region (AWS Data can be used for cross-region copy)
  • Uses those services' native capabilities (snapshots etc)
  • Resources: plans, vaults, recovery points
Characteristics
  • Encryption
    • can be encrypted in transit and at rest
    • for EFS, where the backup functionality comes from Backup itself, it uses KMS
    • for others, uses the service's native encryption capabilities
  • Resource-based policy for vaults
    • these only constrain vault access
    • not access to the underlying backup like an EBS or RDS snapshot

Storage Gateway

Description
  • Hybrid storage service that enables on-premises virtual appliances to seamlessly use AWS cloud storage
  • Appliance = VM image to install on a host in the data center

Configurations
Gateway-Cached Volumes (GCV)
  • Allows to expand local storage capacity into S3
  • All data stored on a CGV is moved to S3, while recently read data is retained locally to provide low latency
  • Size
    • 1 volume = max 32TB
    • 1 gateway = up to 32 volumes → max storage = 1PB
  • Backup via snapshots (incremental)
  • Security
    • Native encryption: SSL/SSE (server-side encryption)
    • Cannot directly access this data with S3 API
Gateway-Stored Volumes (GSV)
  • Allows to store data on your on-premises storage and async backup data to S3
  • Backups as EBS snapshots (incremental)
  • Size
    • 1 volume = max 16TB
    • 1 gateway = up to 32 volumes → max storage = 512TB
  • Security
    • Native encryption: SSL/SSE (server-side encryption)
    • Cannot directly access this data with S3 API
File Gateway
  • Provides an NFS-style protocol for transferring data to and from the gateway
  • Best suited for backup scenarios
Gateway Virtual Tape Libraries (GVTL)
  • Lets you leverage tape-based backup infrastructure to store data on virtual tape cartridges that you create on your GVTL
  • Ideal for replacing off-site tape directories
  • When tape SW ejects a tape → archived on a VIRTUAL TAPE SHELF (VTS) and stored in Glacier
  • Size
    • 1 gateway = up to 1500 tapes → max storage = 1PB
    • 1! VTS per region
    • Multiple gateways in the same region can share VTS