Create a protection group for AWS resources

Create a protection group to automatically protect AWS resources based on rules.

Prerequisites

Configure a delegated administrator account that has access to member accounts that you want to protect.
Create a backup plan
(Commvault SaaS only) Configure a resource pool for the AWS workload that you want to protect. For instructions, see Add a Workload Resource Pool.

To create a protection group, follow these steps:

Go to Discover > AWS.
Click Create protection group.
Select a connection, and then click Next.
Enter a name for the protection group, and then click Next.
Select accounts:
- To automatically discover new AWS member accounts as and when you add them, select Connect all accounts.
- To discover resources from specific accounts, select Connect specific accounts and then select the accounts.
From the Workloads list, select the workloads that you want to protect, and then click OK.
Considerations for workloads
- To enable cross account replication support for Aurora and RDS Snapshot instances, see MSP configuration for AWS replication account.
- To protect EFS clients, you must configure scale manager for access nodes. For instructions, see Getting Started with Amazon EFS Backups Through Automated Discovery.
In the rule group section, click Add to configure rules to identify the resources that you want to protect.
- To match resources by region, add a region rule.
- To match resources by tag, add a tag rule. The tag value must be in the format Tag name\Tag value or Tag name.
Click Save, and then click Next.
Select the backup plan, and then click Next.
To review the resources that match the rule criteria, click Preview.
Click Submit.

After the protection group is created, Commvault automatically creates the required clients (hypervisor, database, and file server) for the matching resources. The clients are created using the following naming convention: <aws-account-name>-<account-id>-<protection-group-name>.