Creating a Backup Plan - AWS Backup

Creating a Backup Plan

When you create a backup plan, it is added to the set of plans in your account. You can also use the AWS CloudFormation template to create a backup plan. For information, see AWS Backup Resource Type Reference in the AWS CloudFormation User Guide.

Creating Backup Plans Using the AWS Management Console

AWS Backup provides two ways to get started using the AWS Backup console:

  • Start from an existing plan — You can create a new backup plan based on the configurations in an existing plan. Be aware that backup plans created by AWS Backup are based on backup best practices and common backup policy configurations. When you select an existing backup plan to start from, the configurations from that backup plan are automatically populated for your new backup plan. You can then change any of these configurations according to your backup requirements.

    For step-by-step instructions, see Step 1: Create a Backup Plan by Modifying an Existing One in the Getting Started section.

  • Build a new plan from scratch — You can create a new backup plan by specifying each of the backup configuration details, as described in the next section. You can choose from the recommended default configurations.

    Note

    If you try to create a backup plan that is identical to an existing plan, you get an AlreadyExistsException error.

Backup Plan Options and Configuration

When you define a backup plan in the AWS Backup console, you configure the following options:

Backup Plan Name

You must provide a unique backup plan name.

Note

If you try to create a backup plan that is identical to an existing plan, you get an AlreadyExistsException error.

Backup Rules

Backup plans are composed of one or more backup rules. Each backup rule consists of the following elements.

Backup Rule Name

Backup rule names are case sensitive. They must contain from 1 to 63 alphanumeric characters or hyphens.

Backup Frequency

The backup frequency determines how often a backup is created. You can choose a frequency of every 12 hours, daily, weekly, or monthly. When selecting weekly, you can specify which days of the week you want backups to be taken. When selecting monthly, you can choose a specific day of the month.

Backup Window

Backup windows consist of the time that the backup window begins and the duration of the window in hours. Backup jobs are started within this window. If you are unsure what backup window to use, you can choose to use the default backup window that AWS Backup recommends. The default backup window is set to start at 5 AM UTC (Coordinated Universal Time) and lasts 8 hours.

Note

You can customize the backup frequency and backup window start time using a cron expression. For more information about cron expressions, see Schedule Expressions for Rules in the Amazon CloudWatch Events User Guide.

Lifecycle

The lifecycle defines when a backup is transitioned to cold storage and when it expires. AWS Backup transitions and expires backups automatically according to the lifecycle that you define.

If you want your backups to be incremental, you must have at least one warm backup. Because each backup to cold storage is a full backup, AWS Backup recommends that you set your lifecycle settings to not move your backup to cold storage until after at least 8 days.

If you set your lifecycle to back up to cold storage after 1 day, each of those backups will be a full backup. This might be less cost effective than a less regular transfer to cold storage.

Backups that are transitioned to cold storage must be stored in cold storage for a minimum of 90 days. Therefore, on the console, the “expire after days” setting must be 90 days longer than the “transition to cold after days” setting. You can't change the “transition to cold after days” setting after a backup has been transitioned to cold.

Note
  • Currently only Amazon EFS file system backups can be transitioned to cold storage. The cold storage expression is ignored for the backups of Amazon Elastic Block Store (Amazon EBS), Amazon Relational Database Service (Amazon RDS), Amazon Aurora, Amazon DynamoDB, and AWS Storage Gateway.

  • When backups reach the end of their lifecycle and are marked for deletion as part of your lifecycle policy, AWS Backup deletes the backups at a randomly chosen point over the following 24 hours. This 24-hour window helps ensure consistent performance for deletion.

Backup Vault

A backup vault is a container to organize your backups in. Backups created by a backup rule are organized in the backup vault that you specify in the backup rule. You can use backup vaults to set the AWS Key Management Service (AWS KMS) encryption key that is used to encrypt backups in the backup vault and to control access to the backups in the backup vault. You can also add tags to backup vaults to help you organize them. If you don't want to use the default vault, you can create your own. For step-by-step instructions for creating a backup vault, see Step 3: Create a Backup Vault.

Copy to Regions

As part of your backup plan, you can optionally create a backup copy in another AWS Region. For more information about backup copies, see Cross-Region Backups.

When you define a backup copy, you configure the following options:

Destination Region

The destination Region for the backup copy.

(Advanced Settings) Backup Vault

The destination backup vault for the copy.

(Advanced Settings) IAM Role

The IAM role that AWS Backup uses when creating the copy. The role must also have AWS Backup listed as a trusted entity, which enables AWS Backup to assume the role. If you choose Default and the AWS Backup default role is not present in your account, a role is created for you with the correct permissions.

(Advanced Settings) Lifecycle

Specifies when to transition the backup copy to cold storage and when to expire (delete) the copy. Backups transitioned to cold storage must be stored in cold storage for a minimum of 90 days. You can't change this value after a copy has transitioned to cold storage.

Expire specifies the number of days after creation that the copy is deleted. This must be greater than 90 days beyond the Transition to cold storage value.

Note

When backups reach the end of their lifecycle and are marked for deletion as part of your lifecycle policy, AWS Backup deletes the backups at a randomly chosen point over the following 24 hours. This 24-hour window helps ensure consistent performance for deletion.

Tags Added to Recovery Points

The tags that you list here are automatically added to backups when they are created.

Tags Added to Backup Plans

These tags are associated with the backup plan itself to help you organize and track your backup plan.