Creating a Cloud Database for Amazon DynamoDB

Create a database instance for Amazon DynamoDB.

Procedure

From the navigation pane, go to Protect > Databases.
The Instances page appears.
Click Add Instance, and then click Cloud DB.
The Add Cloud DB instance page appears.
From the Select vendor list, select Amazon.
From the Database service list, select DynamoDB.
In the Instance box, type the instance name.
In the Table group box, type the name.
Assign an Amazon Web Services (AWS) account.
You can use an existing Amazon Web Services (AWS) account for the instance, or define a new AWS account.

Account Option	Steps
To use an existing AWS account	To select an existing cloud account for the instance, from the Cloud account list, select the cloud account name.
To define a new AWS account	Click Add. The Add cloud account page appears. In the Name box, type a name for the new cloud account. Optional: In the Regions box, type the region names that you want to back up, separated by commas. For example, enter us-east-1,us-west-1. By default, tables from all regions are backed up. If the cloud account does not have access to all the AWS regions due to organizational restrictions or if you want to restrict the backups to certain regions only, then enter theregions that are allowed for backups. Enter the host or account authentication information: To use IAM role authentication, click IAM role. Note: If you select IAM Role authentication for the Amazon client, but a proxy that is not associated with the IAM role is used for a backup or restore, the operation fails. Define custom permissions to access AWS resources to enable support for DynamoDB backups and restores. Download the AWS_DynamoDB_permissions.json file and use it on the AWS command line to apply the required permissions. To use an access key and secret key pair to access the AWS account, click Access and secret key, and then enter the following information for your Amazon account: Access key: Type the access key ID. Secret key: Type the secret access key. Use service account resources: This toggle key does not apply to cloud databases. To use an STS assume role with IAM policy to access the AWS account, click STS assume role with IAM policy, and then enter the AWS ARN for using the STS Assume Role. To select access nodes that have the necessary permissions associated with them in the AWS Console, from the Access nodes list, select access nodes (proxies) or servers to use for the backup and restore operations. Click Save.

Account Option

Steps

To use an existing AWS account

To select an existing cloud account for the instance, from the Cloud account list, select the cloud account name.

To define a new AWS account

Click Add.
The Add cloud account page appears.
In the Name box, type a name for the new cloud account.
Optional: In the Regions box, type the region names that you want to back up, separated by commas.
For example, enter us-east-1,us-west-1.
By default, tables from all regions are backed up.
If the cloud account does not have access to all the AWS regions due to organizational restrictions or if you want to restrict the backups to certain regions only, then enter theregions that are allowed for backups.
Enter the host or account authentication information:
- To use IAM role authentication, click IAM role.
  Note: If you select IAM Role authentication for the Amazon client, but a proxy that is not associated with the IAM role is used for a backup or restore, the operation fails.
  Define custom permissions to access AWS resources to enable support for DynamoDB backups and restores. Download the AWS_DynamoDB_permissions.json file and use it on the AWS command line to apply the required permissions.
- To use an access key and secret key pair to access the AWS account, click Access and secret key, and then enter the following information for your Amazon account:
  - Access key: Type the access key ID.
  - Secret key: Type the secret access key.
  - Use service account resources: This toggle key does not apply to cloud databases.
- To use an STS assume role with IAM policy to access the AWS account, click STS assume role with IAM policy, and then enter the AWS ARN for using the STS Assume Role.
To select access nodes that have the necessary permissions associated with them in the AWS Console, from the Access nodes list, select access nodes (proxies) or servers to use for the backup and restore operations.
Click Save.

From the Plan list, select the server plan that you want to use for the backup operations.
To increase the throughput and performance of the backup operation, move the Adjust read capacity toggle key to the right, and then select the number of units.
For more information about managing throughput settings, see Optimizing the Backup Performance for a DynamoDB Table Group.
To filter the Backup content that you want to back up, click Edit, and then select or clear the regions that you want to include or exclude in the backups.
Click Add.

Results

The DynamoDB database instance and a default table group for the instance are created.

Creating a Cloud Database for Amazon DynamoDB

On this page

Procedure

Results

Creating your PDF