Creating backup copies across AWS Regions
Using AWS Backup, you can copy backups to multiple AWS Regions on demand or automatically as part of a scheduled backup plan. Cross-Region replication is particularly valuable if you have business continuity or compliance requirements to store backups a minimum distance away from your production data. For a video tutorial, seeManaging cross-Region copies of backups.
When you copy a backup to a new AWS Region for the first time, AWS Backup copies the backup in full. In general, if a service supports incremental backups, subsequent copies of that backup in the same AWS Region will be incremental. AWS Backup will re-encrypt your copy using the customer managed key of your destination vault.
An exception is Amazon EBS, where changing the encryption status of a snapshot during a copy operationresults in a full (not incremental) copy.
Requirements
Most AWS Backup-supported resources support cross-Region backup. For specifics, seeFeature availability by resource.
Most AWS Regions support cross-Region backup. For specifics, seeFeature availability by AWS Region.
AWS Backup does not support cross-Region copies for storage in cold tiers.
Cross-Region copy encryption
SeeEncryption for a backup copy to a different account or AWS Region for details on how encryption works for copy jobs.
Cross-Region copy considerations with specific resources
Amazon RDS
You can'tcopy an option group to another AWS Region. If this attempted, you can get an error, such as "The snapshot requires a target option group with the following options: ...."
You must input the same option groups in the target AWS Region when you create a new cross-Region copy of an Amazon RDS snapshot.
Performing on-demand cross-Region backup
To copy an existing backup on-demand
Open the AWS Backup console athttps://console.aws.amazon.com/backup.
ChooseBackup vaults.
Choose the vault that contains the recovery point you want to copy.
In theBackups section, select a recovery point to copy.
Using theActions dropdown button, chooseCopy.
Enter the following values:
- Copy to destination
Choose the destination AWS Region for the copy. You can add a new copy rule per copy to a new destination.
- Destination Backup vault
Choose the destination backup vault for the copy.
- Transition to cold storage
Choose when to transition the backup copy to cold storage. Backups transitioned to cold storage must be stored there for a minimum of 90 days. This value cannot be changed after a copy has transitioned to cold storage.
To see the list of resources that you can transition to cold storage, see the "Lifecycle to cold storage" section of theFeature availability by resource table. The cold storage expression is ignored for other resources.
- Retention period
Choose specifies the number of days after creation that the copy is deleted. This value must be greater than 90 days beyond theTransition to cold storage value.
- IAM role
Choose the IAM role that AWS Backup will use when creating the copy. The role must also have AWS Backup listed as a trusted entity, which enables AWS Backup to assume the role. If you chooseDefault and the AWS Backup default role is not present in your account, one will be created for you with the correct permissions.
ChooseCopy.
Scheduling cross-Region backup
You can use a scheduled backup plan to copy backups across AWS Regions.
To copy a backup using a scheduled backup plan
Open the AWS Backup console athttps://console.aws.amazon.com/backup.
InMy account, chooseBackup plans, and then chooseCreate Backup plan.
On theCreate Backup plan page, chooseBuild a new plan.
ForBackup plan name, enter a name for your backup plan.
In theBackup rule configuration section, add a backup rule that defines a backup schedule, backup window, and lifecycle rules. You can add more backup rules later.
ForBackup rule name, enter a name for your rule.
ForBackup vault, choose a vault from the list. Recovery points for this backup will be saved in this vault. You can create a new backup vault.
ForBackup frequency, choose how often you want to take backups.
For services that support PITR, if you want this feature, chooseEnable continuous backups for point-in-time recovery (PITR). For a list a services that support PITR, see that section of theFeature availability by resource table.
ForBackup window, chooseUse backup window defaults -recommended. You can customize the backup window.
ForCopy to destination, Choose the destination AWS Region for your backup copy. Your backup will be copied to this Region. You can add a new copy rule per copy to a new destination. Then enter the following values:
- Copy to another account's vault
Do not toggle this option. To learn more about cross-account copy, seeCreating backup copies across AWS accounts
- Destination Backup vault
Choose the backup vault in the destination Region where AWS Backup will copy your backup.
If you would like to create a new backup vault for cross-Region copy, chooseCreate new Backup vault. Enter the information in the wizard. Then chooseCreate Backup vault.
ChooseCreate plan.
