Getting started 2: Create an on-demand backup - AWS Backup

Getting started 2: Create an on-demand backup

On the AWS Backup console, the Protected resources page lists resources that have been backed up by AWS Backup at least once. If you’re using AWS Backup for the first time, there aren’t any resources, such as Amazon EBS volumes or Amazon RDS databases, listed on this page. This is true even if that resource was assigned to a backup plan if that backup plan has not run a scheduled backup job at least once.

In this first step, you create an on-demand backup of one of your resources. You will then see this resource listed on the Protected resources page.

To create an on-demand backup
  1. Sign in to the AWS Management Console, and open the AWS Backup console at

  2. Using the navigation pane, choose Protected resources, and then Create on-demand backup.

  3. On the Create on-demand backup page, choose the resource type that you want to back up; for example, choose DynamoDB for Amazon DynamoDB tables.

  4. Choose the name or ID of the resource that you want to protect. Make sure that the resource you chose is the one you want.


    For Amazon FSx for Lustre, Persistent and Persistent_2 deployment types are supported.

  5. Ensure that Create backup now is selected. This initiates a backup immediately and enables you to see your saved resource sooner on the Protected resources page.

  6. Specify a transition to cold storage value (if appropriate) and an expire value.

    • To see the list of resources that you can transition to cold storage, see the "Lifecycle to cold storage" section of the Feature availability by resource table. All other resource types are saved to warm storage, and ignore the transition to cold storage expression. The Expire value is valid for all resource types.

    • When backups expire and are marked for deletion as part of your lifecycle policy, AWS Backup deletes the backups at a randomly chosen point over the following 8 hours. This window helps ensure consistent performance.

  7. Choose an existing backup vault. Choosing Create new backup vault opens a new page to create a vault and then returns you to the Create on-demand backup page when you are finished.

  8. Under IAM role, choose Default role.


    If the AWS Backup default role is not present in your account, a role is created for you with the correct permissions.

  9. If you want to assign one or more tags to your on-demand backup, enter a key and optional value, and choose Add tag.

    • For Amazon EC2 resources, AWS Backup automatically copies existing group and individual resource tags, in addition to any tags that you add to this backup. For more information, see Copying tags onto backups.

    • When creating a tag-based backup plan, if you choose a role other than Default role, make sure that it has the necessary permissions to back up all tagged resources. AWS Backup tries to process all resources with the selected tags. If it encounters a resource that it doesn't have permission to access, the backup plan fails.

  10. Choose Create on-demand backup. This takes you to the Jobs page, where you will see a list of jobs.

  11. If your resource type is EC2, the Advanced backup settings section will appear. Choose Windows VSS if your EC2 instance is running Microsoft Windows. This enables you to take application-consistent Windows VSS backups.


    AWS Backup currently supports application-consistent backups of resources running on Amazon EC2 only. Not all instance types or applications are supported for Windows VSS backups. For more information, see Creating Windows VSS backups.

  12. Choose the Backup job ID for the resource that you chose to back up to see the details of that job.

Next steps

To automate your backup activity, proceed to Getting started 3: Create a scheduled backup.