Creating AWS CloudHSM Clusters From Backups - AWS CloudHSM

Creating AWS CloudHSM Clusters From Backups

To restore an AWS CloudHSM cluster from a backup, create a cluster and specify the backup to restore. After you create the cluster, don't initialize or activate it. Add a HSM to the cluster and your cluster will contain the same users, key material, certificates, configuration, and policies that were in the backup. For more information about managing backups, see Managing Backups.

Create Clusters from Backups (Console)

To create a cluster from a previous backup (console)

  1. Open the AWS CloudHSM console at https://console.aws.amazon.com/cloudhsm/.

  2. Choose Create cluster.

  3. In the Cluster configuration section, do the following:

    1. For VPC, choose a VPC for the cluster that you are creating.

    2. For AZ(s), choose a private subnet for each Availability Zone that you are adding to the cluster.

  4. In the Cluster source section, do the following:

    1. Choose Restore cluster from existing backup.

    2. Choose the backup that you are restoring.

  5. Choose Next: Review.

  6. Review your cluster configuration, then choose Create cluster.

  7. Specify how long the service should retain backups.

    Accept the default retention period of 90 days or type a new value between 7 and 379 days. The service will automatically delete backups in this cluster older than the value you specify here. You can change this later. For more information, see Configuring Backup Retention.

  8. Choose Next.

  9. (Optional) Type a tag key and an optional tag value. To add more than one tag to the cluster, choose Add tag.

  10. Choose Review.

  11. Review your cluster configuration, and then choose Create cluster.

Tip

To create a HSM in this cluster that contains the same users, key material, certificates, configuration, and policies that were in the backup that you restored, add a HSM to the cluster.

Create Clusters From Backups (AWS CLI)

To determine the backup ID, issue the describe-backups command.

To create clusters from backups (AWS CLI)

  • At a command prompt, issue the create-cluster command. Specify the HSM instance type, the subnet IDs of the subnets where you plan to create HSMs, and the backup ID of the backup that you are restoring.

    $ aws cloudhsmv2 create-cluster --hsm-type hsm1.medium \ --subnet-ids <subnet ID 1> <subnet ID 2> <subnet ID N> \ --source-backup-id <backup ID> { "Cluster": { "HsmType": "hsm1.medium", "VpcId": "vpc-641d3c0d", "Hsms": [], "State": "CREATE_IN_PROGRESS", "SourceBackupId": "backup-rtq2dwi2gq6", "BackupPolicy": "DEFAULT", "BackupRetentionPolicy": { "Type": "DAYS", "Value": 90 }, "SecurityGroup": "sg-640fab0c", "CreateTimestamp": 1504907311.112, "SubnetMapping": { "us-east-2c": "subnet-0e358c43", "us-east-2a": "subnet-f1d6e798", "us-east-2b": "subnet-40ed9d3b" }, "Certificates": { "ClusterCertificate": "<certificate string>" }, "ClusterId": "cluster-jxhlf7644ne" } }

Create Clusters From Backups (AWS CloudHSM API)

Refer to the following topic to learn how to create clusters from backups by using the API.