Before You Begin

Before you protect RDS resources, consider the following:

If you plan to create image-level backups of RDS resources, backup infrastructure components that will take part in the backup process must be added to the backup infrastructure and configured properly. These include backup repositories and worker instances.

Veeam Backup for AWS supports creating image-level backups for Microsoft SQL Server and PostgreSQL DB instances only. However, the size of each database hosted on a protected Microsoft SQL Server DB instance must not exceed 5 TiB.

For the list of supported PostgreSQL versions, see Protecting RDS Resources.

For Veeam Backup for AWS to be able to create image-level backups for PostgreSQL DB instances, make sure that security groups associated with worker instances allow outbound HTTPS traffic from the worker instances through port 443 to download a certificate bundle for establishing SSL/TLS connections. For more information on certificate bundles for AWS Regions, see AWS Documentation.
Veeam Backup for AWS does not support creating cloud-native snapshots for PostgreSQL DB clusters with Multi-AZ DB cluster deployment and IBM Db2 DB instances.
Veeam Backup for AWS does not support creating cloud-native snapshots for Aurora PostgreSQL Limitless Database clusters.
Veeam Backup for AWS does not support creating image-level backups for Microsoft SQL Server DB instances that host system databases only.
Veeam Backup for AWS does not support creating image-level backups for Aurora PostgreSQL clusters.
Veeam Backup for AWS does not support creating archived backups for Microsoft SQL Server DB instances.

[Applies only if you plan to back up Microsoft SQL Server DB instances] The SQLSERVER_BACKUP_RESTORE option must be added to the option group that is applied to each processed DB instance.

The IAM role that is associated with the SQLSERVER_BACKUP_RESTORE option must have the permissions required to access temporary Amazon S3 buckets. The IAM role must also have a trust relationship and a permissions policy attached to allow the Amazon RDS service to assume the role. For more information on the backup and restore option, see AWS Documentation.

[Applies only if you plan to back up Microsoft SQL Server DB instances] If you plan to enable the private network deployment functionality, Veeam Backup for AWS must be able to connect to the public s3.<region>.amazonaws.com endpoint to access temporary Amazon S3 buckets. Otherwise, backup policies processing DB instances will fail to produce image-level backups. For more information on the temporary buckets, see Performing RDS Backup.

Veeam Backup for AWS runs retention sessions at 4:00 AM by default, according to the time zone set on the backup appliance. If you schedule backup policies to execute at 4:00 AM, the backup policies and retention tasks will be queued.