Configuring Backups for Amazon DynamoDB Instances Using the Commvault Cloud Infrastructure

You can back up your Amazon DynamoDB instances directly to the cloud, without configuring or installing backup gateways, using the Commvault Cloud infrastructure.

Before You Begin

If you are an MSP and you want your tenant administrators to configure the Amazon DynamoDB instances using the Commvault Cloud infrastructure, see Managed Service Provider Configuration for Amazon Web Services Databases.

Start the Configuration Wizard

From the Command Center navigation pane, go to Protect > Databases.

The Instances page appears.
In the upper-right area of the page, click Add instance > Cloud database service.

The Add Cloud DB Instance page appears.
Select Amazon Web Services and then click Next.

The Select a Database Service page appears.
Select DynamoDB and then click Next.

The Configure Permissions page of the configuration wizard appears.

Configure Permissions

Select Use hosted infrastructure
Click the Launch the CloudFormation Stack link to open the AWS account in the AWS console.

Note

If you do not have permission to create a role in the AWS account, copy the Launch the CloudFormation Stack link and share it with your AWS IAM administrator.
Log on to the AWS console.

The Quick create stack page appears.
Under Capabilities, read the information about the template, and then select the acknowledgment check box.
Click Create stack.

Wait for the CloudFormation Stack to finish creating the CommvaultTenantRole IAM role.

The CloudFormation Stack creates the following policies, and then attaches the policies to CommvaultTenantRole:
- CommvaultTenantRole-DocDBPolicy
- CommvaultTenantRole-DynamoDBPolicy
- CommvaultTenantRole-EC2Policy
- CommvaultTenantRole-RDSPolicy
- CommvaultTenantRole-RedshiftPolicy
- CommvaultTenantRole-S3Policy
- CommvaultTenantRole-VPCPolicy
After the stack is created, on the Outputs tab of the AWS console, copy the ExternalID and IAMRole (ARN of MetallicTenantRole) key values.
Return to the Commvault Cloud configuration wizard.
For Credential, select existing credentials or create new credentials.
Important

The credentials must have an external ID and an IAM role ARN—the values that you copied from the Outputs tab of the AWS console in the preceding step:
- If you select existing credentials, to verify that the credentials have an external ID and an IAM role ARN, click the edit button .
- If you create new credentials, make sure to enter the external ID and the IAM role ARN.
- If you create a new IAM role (to use instead of the MetallicTenantRole IAM role) and you attach the new role to the Commvault Cloud backup gateway that handles your Amazon DynamoDB cluster backups, make sure to update the credentials with the new external ID.
Click Next.

The Region page of the configuration wizard appears.

Region

Select the region that the instances reside in.

Only the regions where Commvault Cloud backup gateways are present are available to select.
Click Next.

The Plan page of the configuration wizard appears.

Plan

A backup plan specifies the storage to back up the data to and other settings such as recovery point objective (RPO) settings.

Commvault software

Select an existing backup plan or create a new backup plan.
Steps to create a backup plan
1. Click the add button .
  
  The Add plan dialog box appears.
2. In the Plan name box, enter a descriptive name for the backup plan.
3. If you have your own storage, move the Bring your own storage toggle key to the right, and then add any of the following storages:
  - Air Gap Protect
  - Cloud
4. For the backup plan settings, select pre-defined settings or create custom settings:
  - To select pre-defined settings, under Retention rules, select one of the following:
    - Select Standard retention to retain the incremental backups for 1 month.
  - To create custom settings, select Custom plan, and then specify the following:
    - For Retention, specify the amount of time to retain the backup jobs.
    - For Backups run every, specify how often to run backups.
5. Click Done.
Click Next.

Commvault SaaS

Select an existing backup plan or create a new backup plan.
Steps to create a backup plan
1. Click the add button .
  
  The Add plan dialog box appears.
2. In the Plan name box, enter a descriptive name for the backup plan.
3. If you have your own storage, move the Bring your own storage toggle key to the right, and then add any of the following storages:
  - Air Gap Protect
  - Cloud
4. For the backup plan settings, select pre-defined settings or create custom settings:
  - To select pre-defined settings, under Retention rules, select one of the following:
    - Select 1 month retention plan to retain the incremental backups for 1 month.
    - Select 1 year retention plan to retain the incremental backups for 1 year.
    - Select 3 year retention plan to retain the incremental backups for 3 years.
  - To create custom settings, select Custom plan, and then specify the following:
    - For Retention, specify the amount of time to retain the backup jobs.
    - For Backups run every, specify how often to run backups.
5. To create a plan with all the advanced options, click the Advanced options click here link, and then create a new plan.
6. Click Done.
Click Next.

The Cloud Account page of the configuration wizard appears.

Cloud Account

Select an existing cloud account or create a new cloud account.
Steps to create a cloud account
1. Click the add button .
  
  The Add cloud account dialog box appears.
2. In Name, enter a descriptive name for the account.
3. Advanced options:
  - Regional endpoints: By default, the region where your backup gateway resides is selected. You cannot change it.
4. Click Save.
Click Next.

The Instance Details page of the configuration wizard appears.

Instance Details

In the Instances box, update the instance name as required.
In the Staging bucket path box, enter the path to stage the data temporarily. Alternatively, click Browse to locate the path.

Note

Staging path should be of the same region as the S3 path.
Click Next.

The Backup Content page of the configuration wizard appears.

Backup Content

Review the data that will be protected.
Click Next.

The Summary page of the configuration wizard appears.

Summary

Review the summary.
Click FINISH.