To back up the Amazon RDS database, create an instance for the database. You can create a new AWS account at the same time.
Before You Begin
Define custom permissions to access AWS resources to enable support for Amazon RDS backups and restores. Download the amazon_rds_backup_restore_permissions.json file and use it on the AWS command line to apply the required permissions.
Procedure
-
From the navigation pane, go to Protect > Databases.
The Overview page appears.
-
Click Add instance, and then select Cloud database service.
The Add Cloud DB Instance dialog box appears.
-
Select Amazon Web Services and then click NEXT.
The Configure Amazon Database dialog box appears.
-
Select RDS (Snapshot) and click NEXT.
The Select A Plan page appears.
-
From the list of plans, select the backup plan that you want to use for the backup operations, and then click NEXT.
The Cloud Account page appears.
-
Use an existing cloud account or create a new cloud account:
-
To use an existing cloud account, from the Cloud account list select an account.
-
To add a new account, click +.
The Add cloud account dialog box appears.
-
In the Name box, type a name for the new cloud account.
-
In the Regions box, type the region names that you want to back up, separated by commas. For example, enter us-east-1,us-west-1.
By default, clusters or instances from all regions are backed up. Choose the regions to back up if any of the following conditions are true:
-
The cloud account does not have access to all the AWS regions due to organizational restrictions.
-
You want to restrict the backups to certain regions.
-
-
Enter the host or account authentication information:
- To use IAM role authentication, click IAM role for Amazon EC2.
Note
If you select IAM role authentication, but an access node that is not associated with the IAM role is used for a backup or restore, the operation fails.
-
To use an access key and secret key pair to access the AWS account, click Access keyS for IAM users, and then from the Credential list select the credential entity.
-
To use an STS assume role with IAM policy to access the AWS account, click AWS STS AssumeRole, and then from the Credential list select the credential entity.
-
To select access nodes that have the necessary permissions associated with them in the AWS Console, from the Access nodes list, select access nodes to use for the backup and restore operations.
-
Click SAVE.
-
-
-
Click NEXT.
The Backup content page appears.
-
To filter the content that is backed up, click EDIT, and then select or clear the regions to include or exclude from the backups.
-
To enable restoring data to a point in time, move the Enable Point in Time Restore toggle key to the right.
-
In the Retention period box, enter the number of days to retain the data.
Note
When you back up the point in time restore enabled instance, the retention period will be updated in the AWS console.
-
Click NEXT.
The Summary page appears.
-
Review the configuration details for the new instance created.
-
Click FINISH.
Results
After you create the instance, a default instance group is automatically created for the instance.
Related Topics
For more information about creating a new credential entity, see Creating a Credential Entity.