Veeam Backup for AWS 4.0
User Guide

Related documents

REST API Reference Veeam Backup & Replication User Guide Integration with Veeam Backup for AWS Guide

Search

Veeam Backup for AWS 4.0
User Guide

Welcome to Veeam Backup for AWS
Integration with Veeam Backup & Replication
System Requirements

Ports
AWS Services
IAM Permissions

Service IAM Role Permissions
Repository IAM Role Permissions
Policy IAM Role Permissions

EC2 Backup IAM Role Permissions
RDS Backup IAM Role Permissions
EFS Backup IAM Role Permissions
VPC Configuration Backup IAM Role Permissions

Restore IAM Permissions

EC2 Restore IAM Permissions
RDS Restore IAM Permissions
EFS Restore IAM Permissions
VPC Configuration Restore IAM Permissions

Full List of IAM Permissions

Licensing

Installing and Removing License
Viewing License Information
Revoking License Units

Architecture Overview
Deployment

Installing Veeam Backup for AWS from AWS Marketplace

After You Install

Installing Veeam Backup for AWS from AMI

Required IAM Permissions
After You Install

Step 1. Accept License Agreement
Step 2. Choose Configuration Mode
Step 3. Specify IAM Identity
Step 4. Create Default User
Step 5. Install License
Step 6. Specify Time Zone
Step 7. Finish Working with Wizard

Uninstalling Veeam Backup for AWS

Deleting CloudFormation Stack
Deleting AWS Resources

Accessing Veeam Backup for AWS
Configuring Veeam Backup for AWS

Managing IAM Roles

Adding IAM Roles

Step 1. Launch Add Account Wizard
Step 2. Specify IAM Role Name and Description
Step 3. Specify IAM Role Type and Settings

Specifying Settings for IAM Role
Specifying Settings for Cross-Account IAM Role
Specifying Settings for New IAM Role

Step 4. Finish Working with Wizard

Editing IAM Role Settings
Checking IAM Role Permissions
Removing IAM Roles

Managing Permissions

Adding User Accounts
Editing User Account Settings
Changing User Passwords
Configuring Multi-Factor Authentication

Managing Backup Repositories

Adding Backup Repositories

Step 1. Launch Add Repository Wizard
Step 2. Specify Repository Name and Description
Step 3. Configure Repository Settings
Step 4. Enable Data Encryption
Step 5. Finish Working with Wizard

Editing Backup Repository Settings
Removing Backup Repositories

Managing Worker Instances

Configuring Worker Instance Settings
Testing File-Level Restore
Editing Worker Instance Settings

Configuring General Settings

Configuring Global Retention Settings
Configuring Global Email Notification Settings

Adding SMTP Accounts
Editing SMTP Accounts

Replacing Security Certificates
Changing Time Zone
Configuring SSO Settings

Performing Backup

How Backup Works

EC2 and RDS Snapshot Chain
EC2 Backup Chain

Changed Block Tracking
Archive Backup Chain

EFS Backup Chain
VPC Configuration Backup Chain
Retention Policy

EC2 and RDS Snapshot Retention
EC2 Backup Retention

CBT Impact on Snapshot Retention
Retention Policy for Archived Backups

EFS Backup Retention
VPC Configuration Backup Retention

Performing EC2 Instance Backup

Creating EC2 Backup Policies

Step 1. Launch Add Policy Wizard
Step 2. Specify Policy Name and Description
Step 3. Configure Backup Source Settings

Step 3.1 Specify IAM Role
Step 3.2 Select AWS Regions
Step 3.3 Select EC2 Instances
Step 3.4 Select EBS Volumes

Step 4. Specify Guest Processing Settings

Enabling Application-Aware Processing
Enabling Guest Scripting

Step 5. Configure Backup Target Settings

Configuring Snapshot Replica Settings
Configuring Image-Level Backup Settings

Step 6. Specify Policy Scheduling Options

Specifying Daily Schedule
Specifying Weekly Schedule
Specifying Monthly Schedule
Specifying Yearly Schedule
Enabling Harmonized Scheduling
Enabling Backup Archiving

Step 7. Enable AWS Tags Assigning
Step 8. Review Estimated Cost
Step 9. Specify Retry and Email Notification Settings
Step 10. Finish Working with Wizard

Creating EC2 Snapshots Manually

Performing RDS Instance Backup

Creating RDS Backup Policies

Step 1. Launch Add Policy Wizard
Step 2. Specify Policy Name and Description
Step 3. Configure Backup Source Settings

Step 3.1 Specify IAM Role
Step 3.2 Select AWS Regions
Step 3.3 Select RDS Instances

Step 4. Configure Backup Target Settings

Configuring Snapshot Replica Settings
Enabling AWS Tags Assigning

Step 5. Specify Policy Scheduling Options

Specifying Daily Schedule
Specifying Weekly Schedule
Specifying Monthly Schedule
Enabling Harmonized Scheduling

Step 6. Review Estimated Cost
Step 7. Specify Retry and Email Notification Settings
Step 8. Finish Working with Wizard

Creating RDS Snapshots Manually

Performing EFS File System Backup

Creating EFS Backup Policies

Step 1. Launch Add Policy Wizard
Step 2. Specify Policy Name and Description
Step 3. Configure Backup Source Settings

Step 3.1 Specify IAM Role
Step 3.2 Select AWS Regions
Step 3.3 Select EFS File Systems

Step 4. Configure Backup Target Settings

Configuring Backup Settings
Enabling Additional Backup Copy
Enabling AWS Tags Assigning

Step 5. Specify Policy Scheduling Options

Specifying Daily Schedule
Specifying Weekly Schedule
Specifying Monthly Schedule
Specifying Yearly Schedule
Enabling Harmonized Scheduling

Step 6. Review Estimated Cost
Step 7. Specify Retry and Email Notification Settings
Step 8. Finish Working with Wizard

Creating EFS Backups Manually

Performing VPC Configuration Backup

Editing VPC Configuration Backup Policy

Step 1. Launch VPC Configuration Backup Wizard
Step 2. Select AWS Regions

Enabling Automatic Protection
Adding AWS Regions Manually

Step 3. Enable Additional Backup Copy
Step 4. Configure Retention Settings
Step 5. Specify Email Notification Settings
Step 6. Finish Working with Wizard

Enabling and Disabling VPC Configuration Backup Policy
Starting and Stopping VPC Configuration Backup Policy

Managing EC2, RDS and EFS Backup Policies

Starting and Stopping Policies
Disabling and Enabling Policies
Setting Policy Priority
Editing Policy Settings
Exporting and Importing Policies

Managing Backed-Up Data

Managing Backed-Up EC2 Instance Data

Removing Backups and Snapshots
Removing Snapshots Created Manually
Retrieving Data From Archive

Managing Backed-Up RDS Instance Data

Removing Snapshots
Removing Snapshots Created Manually

Managing Backed-Up EFS Data

Removing Backups
Removing Backups Created Manually

Managing Backed-Up VPC Configuration Data

Removing VPC Configuration Backups
Comparing VPC Configuration Backups
Exporting VPC Configuration

Performing Entire Configuration Export

Step 1. Launch VPC Export Wizard
Step 2. Select Restore Point
Step 3. Specify IAM Identity
Step 4. Choose Export Mode
Step 5. Configure Availability Zone Mapping
Step 6. Configure Peering Connection Settings
Step 7. Specify Amazon S3 Bucket
Step 8. Specify Export Reason
Step 9. Finish Working with Wizard

Performing Selected Items Export

Step 1. Launch VPC Export Wizard
Step 2. Select Restore Point
Step 3. Specify IAM Identity
Step 4. Specify Amazon S3 Bucket
Step 5. Specify Export Reason
Step 6. Finish Working with Wizard

Performing Restore

EC2 Instance Restore

Performing Entire EC2 Instance Restore

Step 1. Launch Instance Restore Wizard
Step 2. Configure Restore Settings
Step 3. Specify Data Retrieval Settings
Step 4. Specify IAM Identity
Step 5. Choose Restore Mode
Step 6. Enable Encryption
Step 7. Specify Instance Name and Type
Step 8. Configure Network Settings
Step 9. Specify Restore Reason
Step 10. Finish Working with Wizard

Performing Volume-Level Restore

Step 1. Launch Volume Restore Wizard
Step 2. Configure Restore Settings
Step 3. Specify Data Retrieval Settings
Step 4. Specify IAM Identity
Step 5. Choose Restore Mode
Step 6. Enable Encryption
Step 7. Specify EBS Volume Name
Step 8. Specify Restore Reason
Step 9. Finish Working with Wizard

Performing File-Level Restore

Step 1. Launch EC2 File-level Recovery Wizard
Step 2. Configure Restore Settings
Step 3. Choose Restore Mode
Step 4. Specify Restore Reason
Step 5. Start Recovery Session
Step 6. Choose Items to Recover
Step 7. Stop Recovery Session

RDS Instance Restore

Step 1. Launch RDS Restore Wizard
Step 2. Select Restore Point
Step 3. Specify IAM Identity
Step 4. Choose Restore Mode
Step 5. Enable Encryption
Step 6. Configure Instance Settings
Step 7. Configure Network Settings
Step 8. Specify Restore Reason
Step 9. Finish Working with Wizard

EFS File System Restore

Performing Entire File System Restore

Step 1. Launch EFS Restore Wizard
Step 2. Select Restore Point
Step 3. Specify IAM Identity
Step 4. Choose Restore Mode
Step 5. Enable Encryption
Step 6. Configure General Settings
Step 7. Configure Network Settings
Step 8. Specify Restore Reason
Step 9. Finish Working with Wizard

Performing File-Level Restore

Step 1. Launch EFS File-level Recovery Wizard
Step 2. Configure Restore Settings

Step 2.1 Select Restore Point
Step 2.2 Specify Items to Restore

Step 3. Specify IAM Identity
Step 4. Choose Restore Mode
Step 5. Enable Encryption
Step 6. Configure General Settings
Step 7. Configure Network Settings
Step 8. Specify Restore Reason
Step 9. Finish Working with Wizard

VPC Configuration Restore

Performing Entire Configuration Restore

Step 1. Launch VPC Restore Wizard
Step 2. Select Restore Point
Step 3. Specify IAM Identity
Step 4. Choose Restore Mode
Step 5. Configure Availability Zone Mapping
Step 6. Review Peering Connection Settings
Step 7. Specify Restore Reason
Step 8. Finish Working with Wizard

Performing Selected Items Restore

Step 1. Launch VPC Restore Wizard
Step 2. Select Restore Point and Items to Restore
Step 3. Specify IAM Identity
Step 4. Specify Restore Reason
Step 5. Finish Working with Wizard

Enabling Data Encryption

Backup Repository Encryption
AWS KMS Encryption

Creating Cloud-Native Snapshots
Creating Snapshot Replicas
Restoring From Snapshots and Replicas
Creating Image-Level Backups
Restoring From Image-Level Backups

Viewing Session Statistics
Collecting Object Properties
Updating Veeam Backup for AWS

Checking for Updates
Installing Updates
Updating IAM Roles
Viewing Updates History

Getting Technical Support
Appendices

Appendix A. Creating IAM Policies
Appendix B. Creating IAM Roles

>User Guide>Appendices

Appendices

In this article

This section provides additional information on how to configure AWS Identity and Access Management resources used to perform Veeam Backup for AWS operations.

In This Section:

Appendix A. Creating IAM Policies
Appendix B. Creating IAM Roles

Page updated 9/22/2021

Send feedback

Home | Products | Forums | Support | Contact Sales | EULA

©2021 Veeam® Software Privacy Notice | Cookie Notice

View all results across Veeam

Back to document search

I want to report a typo

There is a misspelling right here:

I want to let the Veeam Documentation Team know about that.

Submit report