Amazon EBS Direct Write Restore from Streaming Backup and Backup Copy

The following table lists the operational outcomes for the EBS Direct Write process:

Operation

Transport Mode

Source Instance Volume Type

Account Level Encryption Enabled?

Outcome with Commvault

Restore within same region

Direct Write

Unencrypted volumes

No

Unencrypted snapshots. Unencrypted volumes

Restore within same region

Direct Write

Volumes encrypted with AWS managed key

No

Snapshots encrypted with AWS managed key. Volumes encrypted with AWS managed key

Restore within same region

Direct Write

Volumes encrypted with CMK

No

Snapshots encrypted with CMK. Volumes encrypted with CMK

Restore within same region

Direct Write

Unencrypted volumes

Yes

Snapshots encrypted with account level default encryption key. Volume encrypted with account level default encryption key

Restore within same region

Direct Write

Volumes encrypted with AWS managed key

Yes

Snapshots encrypted with AWS managed key. Volumes encrypted with AWS managed key

Restore within same region

Direct Write

Volumes encrypted with CMK

Yes

Snapshots encrypted with CMK. Volumes encrypted with CMK

Restore to different region

Direct Write

Unencrypted volumes

No

Unencrypted snapshots. Unencrypted volumes

Restore to different region

Direct Write

Volumes encrypted with AWS managed key

No

Snapshots encrypted with AWS managed key of destination region. Volumes encrypted with AWS managed key of destination region.

Note

If account level default key is set, that key will be used even if Account Level Encryption is disabled.

Restore to different region

Direct Write

Volumes encrypted with CMK

No

Snapshots encrypted with AWS managed key of destination region. Volumes encrypted with AWS managed key of destination region. If CMK is multi-region, then snapshot and volume are encrypted with the same CMK

Note

If account level default key is set, that key will be used even if Account Level Encryption is disabled.

Restore to different region

Direct Write

Unencrypted volumes

Yes

Snapshot encrypted with account level default encryption key of destination region. volume encrypted with account level default encryption key of destination region

Restore to different region

Direct Write

Volumes encrypted with AWS managed key

Yes

Snapshot encrypted with account level default encryption key of destination region. volume encrypted with account level default encryption key of destination region

Restore to different region

Direct Write

Volumes encrypted with CMK

Yes

Snapshot encrypted with account level default encryption key of destination region. Volume encrypted with account level default encryption key of destination region. If CMK is multi-region, then snapshot and volume are encrypted with the same CMK

Loading...