Requirements for Using an Amazon EC2 Instance as an Agentless File Recovery Destination

To perform an agentless restore to an Amazon EC2 instance, verify that the EC2 instance that you want to use as a destination, the guest instance that you want to restore from, and the access nodes meet the requirements.


The following are supported:

  • Restoring files and folders directly to the original instance (in-place restore) or to a different instance (out-of-place restore).

  • The following backups can be restored:

    • Streaming backups

    • IntelliSnap backups

    • Backups of Windows instances

    • Backups of Linux instances

  • Agentless restores are supported only in the Command Center.


  • The destination instance must be capable of being a destination for agentless file recovery.

    To check whether it is, do the following:

    1. From the AWS Console, in the SYSTEMS MANAGER SERVICES section, go to Node Management.

    2. Click Run a command.

    3. In the Command document section, select AWS-RunPowerShellScript.

    4. In the Target section, click Choose instances manually, and then select your destination guest instance.

    The instances that are displayed can be used as destinations for agentless file recovery.

  • The destination instance must be able to access the metadata of the guest instance. For information, see Retrieve instance metadata in the AWS documentation.

  • The destination instance must have connectivity to an Amazon S3 service endpoint (

  • Either the destination instance or the guest instance must have the AWS Systems Manager (SSM) Agent installed.

    In AWS, SSM is installed by default on instances that run Windows Server 2016 and more recent versions of Windows Server.

    For Windows Server 2003 to Windows Server 2012 R2, SSM is installed by default on instances that are created from AMIs published in November 2016 and more recently.

  • The destination instance must have PowerShell Core installed:

  • The destination instance must have AWS Tools and AWSPowerShell NetCore, with the scope set to all users, installed:

  • The access node must have all the permissions that are required for performing agentless restores. Those permissions are included in the amazon_restricted_role_permissions.json JSON file.

  • Both the destination instance and the guest instance must be running.

Agentless Restore Process

To perform an agentless restore, the software uses the following process:

  1. Restore the data to the access node.

  2. If an Amazon S3 bucket does not already exist, create one.

  3. Upload the data to the Amazon S3 bucket.

  4. Download the data to the destination instance.

  5. Delete the temporary data from the Amazon S3 bucket and the access node.