> Clumio user guide > Protect > S3

Get started with Clumio Protect for S3

Clumio provides a secure way to protect your Simple Storage Service (S3) through Clumio Protect for S3. 

Bucket-level permissions

If you have bucket-level permissions applied to your S3 bucket, verify that the permissions allow access to the Clumio roles for successful ingestion/Inventory. 

For instructions to configure your bucket-level permissions to include the Clumio Role, see AWS S3: Bucket permissions required for successful ingestion or protection of buckets in the knowledge base.

Supported storage classes

You can perform Clumio Protect backups for the following storage classes:

  • S3 Standard

  • S3 Intelligent-Tiering

  • S3 Standard - IA

  • S3 One Zone - IA

  • S3 Reduced Redundancy

Note

Glacier and Glacier Deep Archive are not supported. 

Supported encryption types

The following encryption types are supported when backing up objects:

  • Server-side encryption with Amazon S3 managed keys (SSE-S3) 2

  • Server-side encryption with AWS Key Management Service (AWS KMS) keys (SSE-KMS)

Note

For assistance with server-side encryption with customer-provided keys (SSE-C), contact support@clumio.com.

Consider the following requirements:

  • SSE-C keys must be stored in AWS Secret Manager.

  • You must use a single SSE-C key to encrypt all objects in a bucket.

Useful information

  • Clumio offers the SecureVault Lite and SecureVault Standard backup tiers. For more information, see Clumio pricing.

  • Protecting the same object across different protection groups will incur metering the object separately across each protection group.

Connect your AWS account

You must first connect the AWS account and regions that contain your EC2 instances and EBS volumes to start protecting them using Clumio. 

Limitations

  • S3 Intelligent-Tiering

  • Backups of objects in Archive Access Tier and Deep Archive Access Tier fail, and the objects are not moved to Frequent Access Tier. Clumio treats the objects as missing and doesn't attempt to back them up again.

  • For any object that's not in Archive Access tier or Deep Archive Access tier but is part of Intelligent Tiering, processing a successful backup promotes objects to the Frequent Access tier. If the objects are not accessed, they are eventually tiered back down.

There may be certain limitations, such as the restore size of a single object, supported types, and so on.

For information about Clumio service limits for S3, see Clumio service limits.

Contact support@clumio.com with any questions or concerns.

×

Loading...