Resilience in AWS Systems Manager Incident Manager - Incident Manager
Replication set

Resilience in AWS Systems Manager Incident Manager

The AWS global infrastructure is built around AWS Regions and Availability Zones. AWS Regions provide multiple physically separated and isolated Availability Zones, which are connected with low-latency, high-throughput, and highly redundant networking. With Availability Zones, you can design and operate applications and databases that automatically fail over between zones without interruption. Availability Zones are more highly available, fault tolerant, and scalable than traditional single or multiple data center infrastructures.

For more information about AWS Regions and Availability Zones, see AWS Global Infrastructure.

Incident Manager is a global-regional service and does not currently support Availability Zones.

In addition to the AWS global infrastructure, Incident Manager offers several features to help support your data resiliency and backup needs. During the Getting prepared wizard you're asked to set up a replication set. This regional replication set ensures that your data and resources are accessible from multiple Regions, making incident management across a cloud-network more manageable. This replication also ensures that your data is safe and accessible in the event that one of your Regions goes down.

Using the Incident Manager replication set

The Incident Manager replication set replicates your data to many Regions to increase cross Region redundancy, allow Incident Manager to access resources in different Regions and reduce latency for your users. The replication set it also used to encrypt your data with either an AWS owned key or your own customer owned key. All Incident Manager resources are encrypted by default. To learn more about how your resources are encrypted, see Data protection in Incident Manager. To get started with Incident Manager, first create your replication set using the Get prepared wizard. To learn more about getting prepared in Incident Manager, see the Get prepared wizard.

Editing your replication set

Using the Incident Manager Settings page you can edit your replication set. You can add Regions, delete Regions, and enable or disable replication set deletion protection. You can't edit the key used to encrypt you data. To change the key, delete the replication set.

Add a Region

  1. Navigate to the Incident Manager console and choose Settings from the left navigation bar.

  2. Choose Add Region.

  3. Select the Region.

  4. Choose Add.

Delete a Region

  1. Navigate to the Incident Manager console and choose Settings from the left navigation bar.

  2. Select the Region you want to delete.

  3. Choose Delete.

  4. Enter delete into the text box and choose Delete.

Deleting your replication set

Deleting the last Region in your replication set deletes the entire replication set. Before you can delete the last Region, disable the deletion protection by toggling Deletion protection on the Settings page. After you've deleted your replication set you can create a new replication set by using the Get prepared wizard.

To delete Regions from your replication set, wait 24 hours after creating them. Attempting to delete a Region from your replication set sooner than 24 hours after creation causes the deletion to fail.

Deleting your replication set deletes all Incident Manager data.

Delete the replication set

  1. Navigate to the Incident Manager console and choose Settings from the left navigation bar.

  2. Select the last Region in your replication set.

  3. Choose Delete.

  4. Enter delete into the text box and choose Delete.