# Create a protection group for AWS resources

Create a protection group to automatically protect AWS resources based on rules.

Prerequisites

- Configure one of the following:

  - A delegated administrator account with access to the AWS member accounts that you want to protect.

  - A single AWS account connection.

- Create a backup plan

- (Commvault SaaS only) Configure a resource pool for the AWS workload that you want to protect.

Note

The steps vary slightly depending on the selected connection type. If you use an AWS Organization connection, you can choose which AWS accounts to include in the protection group. If you use a single AWS account connection, resources are discovered only from that account.

To create a protection group, follow these steps:

1. From the Command Center navigation pane, go to Protect > Cloud Discovery > AWS.

2. Click Create protection group.

3. Select a connection, and then click Next.

4. Enter a name for the protection group, and then click Next.

5. Select accounts (AWS Organization connection only):

   - To automatically discover new AWS member accounts as and when you add them, select Connect all accounts.

   - To discover resources from specific accounts, select Connect specific accounts and then select the accounts.

   Note

   If you selected a single AWS account connection, this step is skipped because resources are discovered only from the connected AWS account.

6. From the Workloads list, select the workloads that you want to protect, and then click OK.

   Considerations for workloads

   - To enable cross account replication support for Aurora and RDS Snapshot instances, see MSP configuration for AWS replication account.

   - To protect EFS clients, you must configure scale manager for access nodes. For instructions, see Getting Started with Amazon EFS Backups Through Automated Discovery.

7. In the rule group section, click Add to configure rules to identify the resources that you want to protect.

   - To match resources by region, add a region rule.

   - To match resources by tag, add a tag rule. The tag value must be in the format `Tag name\Tag value` or `Tag name`.

8. Click Save, and then click Next.

9. Select the backup plan, and then click Next.

10. To review the resources that match the rule criteria, click Preview.

11. Click Submit.

    After the protection group is created, Commvault automatically creates the required clients (hypervisor, database, and file server) for the matching resources. The clients are created using the following naming convention: `<aws-account-name>-<account-id>-<protection-group-name>`.

×

Loading...