Connecting an AWS account using CloudFormation

To securely perform backup and restore operations, Clumio requires cross-account IAM roles deployed by CloudFormation.

For information about the resources, IAM roles, and IAM policies that are created and assigned to the Clumio role, see IAM permissions Required to Deploy the Clumio Service.

Using the CloudFormation template, you can connect to an AWS account either automatically, as described on this page, or manually.

After you connect your AWS account to Clumio, you can edit, delete, or add protection to your account connection at any time.

1. Sign into your AWS account so that Clumio can deploy the role in the correct account and region.

2. From the Clumio platform, navigate to the AWS > Connect page.

3. Click Add accounts, and then select Add with CloudFormation from the drop-down menu to launch the wizard.

4. On the first screen of the wizard, type or paste your 12-digit AWS account number and select the region or regions you want to connect to Clumio. If you don't see a region you want to connect, contact support@clumio.com.

5. Specify the asset types you want this connection to support. Click Customize Assets to select specific asset types. By default, the entire set is selected.

   Note

   Once asset types have been selected you cannot remove that asset type when you modify the connection. You can only add assets to this list when you modify the connection.

6. Select the region to deploy your stack in. You can select any region. Clumio uses the stack to create AWS stack sets for other regions in your AWS account.

7. Create the stack. Make sure to log into the AWS account that you want to connect to Clumio and click Launch stack wizard. This will launch the AWS stack creation wizard. Complete the following fields in AWS:

8. In the Stack name section, modify the default stack name from “ClumioService” to a meaningful name to help you easily identify the stack in the AWS Management Console (optional).

9. In the Capabilities section, click the checkbox to acknowledge the statement, which informs you that the stack creation process includes creating a custom IAM role and IAM policies.

10. Click Create stack. AWS creates the resources that Clumio requires to perform backups, snaps, and restores. After the stack is created, Clumio tries to connect to your AWS account.

11. You can check the connection status from the table on the AWS connect page. A status of "Connecting..." indicates that Clumio is trying to connect to your AWS account.

If you have connected multiple regions, you can expand the account to view the connection progress for each region. Once all the connections are fully established for the account, the status changes to "Connected".

Edit account connection

You can edit, delete, or add protection to your account connection at any time after it is connected.

1. From Clumio, select AWS > Connect.

   The AWS connect page displays.

2. Click the Actions column for the account you want to edit, and then select Edit from the pop-up menu.

3. In the dialog that displays, you can edit the description, and organizational unit to which this account belongs. You can only change up or down one level of organizational unit at a time.

4. The AWS region displays the region in which your stack that creates the stack set is located. The location of the stack does not affect your backup settings.

5. Select regions you want to connect from the list.

6. You can only add asset types to the connection; you cannot remove the asset types selected when this connection was created.

7. Click Update Cloud Formation template to update the template and save your changes.