Configuring Agentless File Recovery for Amazon Web Services


You can configure AWS instances to use as destinations for agentless file recovery.

You can restore files and folders directly to the original instance or a different instance, from streaming or IntelliSnap backups of Windows or Linux instances. The destination instance, or Guest instance must be running.

You can use a VSA access node running Windows or Linux.

This feature is supported only from the Command Center.

Before You Begin

The destination instance (or Guest instance) must be running and the instance metadata must be accessible from the destination instance. For more information, see Retrieve instance metadata.


  1. On the destination instance (or Guest instance), Install AWS Systems Manager (SSM) if it is not already installed.

    In AWS, SSM is installed by default on instances that run Windows Server 2016 or a more recent version of Windows Server.

    For Windows Server 2003 to Windows Server 2012 R2, SSM is installed by default on instances created from AMIs published in November 2016 or later.

  2. Attach an IAM role with the AmazonSSMManagedInstanceCore managed policy and vsa_SSMInstanceProfileS3Policy to the Amazon instance.

  3. Install PowerShell Core on the destination instance:

  4. Install AWS Tools and AWSPowerShell NetCore with scope set to all users:

  5. To verify that the instance can be used as a destination for agentless file recovery, complete the following steps:

    1. From the AWS Console, go to SYSTEMS MANAGER SERVICES > Run Command.

    2. Click Run a command.

    3. From Manage your Instances, click Run a command.

    4. Select AWS-RunPowerShellScript.

    5. In the Select Targets by section, click Select instances.

      The instances that are displayed can be used as destinations for agentless file recovery.