AWS Backup and AWS CloudFormation

In general

With AWS CloudFormation, you can provision and manage your AWS resources in a safe, repeatable manner using templates that you create. You can use AWS CloudFormation templates and StackSets to manage your backup plans, backup resource selections, and backup vaults. For information about using AWS CloudFormation, see How Does AWS CloudFormation Work? in the AWS CloudFormation User Guide.

Before you create your AWS CloudFormation template or StackSet, consider the following:

• Create separate templates for your backup plans and your backup vaults. You can only delete backup vaults that are empty. You can't delete a stack that includes backup vaults if they contain recovery points.

• Verify you have a service role available before you create your stack. The AWS Backup default service role is created for you the first time you assign resources to a backup plan. If you haven't assigned resources to your backup plan, do so before creating your stack. You can also specify a custom role that you create. For more information about roles, see IAM service roles.

Deploying a backup vault, backup plan, and resource assignment using AWS CloudFormation

For sample AWS CloudFormation templates that deploys a backup vault, backup plans, and resource assignment, see Assigning resources using AWS CloudFormation.

Deploying backup plans using AWS CloudFormation

For sample AWS CloudFormation templates that deploy backup plans, see AWS CloudFormation templates for backup plans.

Deploying AWS Backup Audit Manager frameworks and report plans using AWS CloudFormation

For sample AWS CloudFormation templates that deploy AWS Backup Audit Manager frameworks and report plans, see AWS CloudFormation templates for backup plans.

Deploying backup plans across accounts using AWS CloudFormation

You can use AWS CloudFormation StackSets across multiple accounts in an AWS Organization. Sample templates are available in the AWS CloudFormation User Guide.

An excellent starting point and reference is the publication Automate centralized backup at scale across AWS services using AWS Backup. With Ibukun Oyewumi and Sabith Venkitachalapathy (Jul. 2021).

Learning more about AWS CloudFormation

For information about using AWS CloudFormation with AWS Backup, see AWS Backup Resource Type Reference in the AWS CloudFormation User Guide.

For information about controlling access to AWS service resources when using AWS CloudFormation, see Controlling Access with AWS Identity and Access Management in the AWS CloudFormation User Guide.