You can restore objects in a protection group using either Global Search or using a specific point-in-time from the calendar view. You can restore all the S3 assets from a protection group or you can select specific objects to restore. You can also choose the account or region, the bucket, and the storage class to restore the objects.
You can also directly access access point-in-time backup data for purposes of backup validation, granular restore at scale, DR testing and copy data management with Clumio's Instant Access feature.
Restores from a protection group
Restore from a protection group using global search
-
From the Clumio navigation pane, go to AWS > Protect > S3 > Protection Groups and click the protection group from which you want to restore objects.
-
On the asset details page, click Search objects across backups. Select a filter from the drop down list. You can use as many of the available filters to find the objects to restore. Click Apply to retrieve a list of objects based on your search.
-
Next, select the latest version of the object or all versions of the object that match your search criteria, to restore. The latest version is displayed by default.
-
View a summary of your selections and then select the options to restore the selected objects.
-
You can specify which account or region, bucket, and storage class to restore the selected objects.
-
You can specify a prefix for the restored objects.
-
You can also choose to add custom tags to the restored objects.
-
Click Restore to restore the objects per your specifications.
Note
Recovery takes from 12 to 48 hours for objects stored in the Archive Tier.
Restore from a protection group using point-in-time recovery
-
From the Clumio navigation pane, go to AWS > Protect > S3 > Protection Groups.
-
Click the protection group to restore objects from.
-
On the asset details page, from the calendar, select a date with a complete backup.
Two options are available: Restore Object and Restore Prefix/Buckets.
If you choose the option to Restore Object the flow is the same as Restore from a Restore from a Protection group using Global Search above.
If you choose the option to Restore Prefix/Buckets, you can select up to 50 buckets from the list (if you have that many available) to restore. Or you can click Next and set search criteria to restore all objects that match the selected search criteria.
-
Select the version to restore.
-
You can specify which account or region, bucket, and storage class to restore the selected objects from.
-
You can specify a prefix for the restored objects.
-
You can add custom tags to the restored objects.
-
Click Restore.
Note
For objects stored in the Archive Tier, recovery takes 12-48 hours.
S3 Instant Access (SecureVault Standard tier only)
With Instant Access endpoints, you can directly access backup data without having to perform a full restore. Access can be granted through either an IAM Role or a CloudFront Distribution, effectively proxying requests for efficient data retrieval. Whereas IAM Role access is appropriate for tightly controlled environments, CloudFront Distribution has the additional advantages of caching and reduced latency, for high-performance or geographically distributed access scenarios.
Note
Instant Access is not supported for backups in the SecureVault Archive tier.
Create an S3 Instant Access endpoint from a scheduled backup
-
From the Clumio navigation pane, go to AWS > Inventory > S3 buckets.
-
Click the S3 bucket to access.
-
On the backup calendar, click a dot.
-
Click Restore, and then select Instant Access.
-
On the Filter objects (optional) screen, you can use filters to restore only some objects. To restore all objects in the bucket, click Skip. To view the first 100 results without filters, click Search.
-
On the Endpoint creation screen, enter a name for the endpoint.
-
For Versions to include, choose to include only the latest version of the objects or all versions.
-
Select a date for the expiration of the endpoint, from 5-30 days.
Objects in the endpoint are retained until the endpoint expires or is deleted, which might differ from the retention for those objects that's specified in your S3 backup policies.
-
To view the number of objects that will be included in this endpoint and the number of credits per day the endpoint will cost, click Calculate object count and cost.
-
Click Create. You can view the endpoint creation task in on the Tasks page.
Create an S3 Instant Access endpoint from a point-in-time backup (continuous backups only)
If Continuous backup is enabled for an S3 bucket, you can create an Instant Access endpoint from a point-in-time backup.
-
From the Clumio navigation pane, go to AWS > Inventory > S3 buckets.
-
Click the S3 bucket to access.
-
In the upper-right area of the page, click Restore, and then select Instant Access.
-
Select a date. You can use filters to restore only some objects. To restore all objects in the bucket, click Skip. To view the first 100 results without filters, click Search.
-
Click Next.
-
On the Endpoint creation screen, enter a name for the endpoint.
-
For Versions to include, specify whether to include only the latest version of the objects or all versions.
-
Select a date for the expiration of the endpoint, from 5-30 days.
Objects in the endpoint are retained until the endpoint expires or is deleted, which might differ from the retention for those objects in your S3 backup policies.
-
To view the number of objects and the credit cost per day, click Calculate object count and cost.
-
Click Create. You can view the endpoint creation task in on the Tasks page.
Access an S3 Instant Access endpoint using an IAM role
-
From the Clumio navigation pane, go to AWS > Inventory > S3 buckets.
-
Click the S3 bucket.
-
Under the backup calendar, click the Instant Access tab.
-
Click the Instant Access endpoint.
-
Click Add IAM role.
-
Copy the permissions policy.
-
In the AWS console, attach the policy as a custom inline policy to an IAM role, and then copy the role ARN.
-
Return to Clumio, paste the ARN, and then click Add.
Access an S3 Instant Access endpoint using a CloudFront distribution
-
From the Clumio navigation pane, go to AWS > Inventory > S3 buckets.
-
Under the backup calendar, click the Instant Access tab.
-
Click the Instant Access endpoint.
-
Click Add CloudFront distribution.
-
Copy the CloudFront distribution origin domain, and then click Next.
-
In the AWS console, go to CloudFront.
-
Select an existing CloudFront distribution or create a new one.
-
Paste the CloudFront distribution origin domain copied from Clumio.
-
Select Origin access control settings (recommended).
-
Click Create new OAC.
-
Leave Sign requests (recommended) selected.
-
Click Create.
-
Return to Clumio, paste the ARN, and then click Add.