Creating a Cloud Database Instance for Amazon DocumentDB


On this page

To back up the Amazon DocumentDB database on Amazon cloud, create a new cloud DB instance for the database.


  1. From the navigation pane, go to Protect > Databases.

    The Instances page appears.

  2. Click Add Instance, and then click Cloud DB.

    The Add Cloud DB instance page appears.

  3. From the Select vendor list, select Amazon.

  4. From the Database engine list, select DocumentDB.

    You can use an existing Amazon Web Services (AWS) account for the instance, or define a new AWS account.

Account option


Use an existing AWS account

To select an existing cloud account for the instance, from the Cloud account list, select the cloud account name.

Define a new AWS account

  1. Click Add.

    The Add cloud account dialog box appears.

  2. In the Name box, type a name for the new cloud account.

  3. Optional: In the Regions box, type the region names that you want to back up, separated by commas. For example, enter us-east-1,us-west-1.

    By default, clusters or instances from all regions are backed up. Choose the regions to back up if any of the following conditions are true:

    • The cloud account does not have access to all the AWS regions due to organizational restrictions.

    • You want to restrict the backups to certain regions.

  4. Enter the host or account authentication information:

    • To use IAM role authentication, click IAM role.

      Note: If you select IAM role authentication for the Amazon client, but a proxy that is not associated with the IAM role is used for a backup or restore, the operation fails.

      Define custom permissions to access AWS resources to enable support for Redshift backups and restores. Download the amazon_documentdb_backup_restore_permissions.json file and use it on the AWS command line to apply the required permissions.

    • To use an access key and secret key pair to access the AWS account, click Access and secret key, and then enter the following information for your Amazon account:

      • Access key: Type the access key ID.

      • Secret key: Type the secret access key.

      • Use admin account resources: If you already configured a hypervisor for an Admin account, move the toggle key to the right, and then select the Admin account from the Account list.

        The Use admin account resources option applies only in environments where data protection resources are provided by a separate Admin account.

  5. To select access nodes that have the necessary permissions associated with them in the AWS Console, from the Access nodes list, select proxies or servers to use for the backup and restore operations.

  6. Click Save.

  1. From the Backup plan list, select the server plan that you want to use for the backup operations.

  2. To filter the content that is backed up, click Edit, and then select or clear the regions to include or exclude from the backups.

  3. Click Add.


After you create the cloud database instance, a default cluster group is automatically created for the instance.