EFS Backup

A backup appliance performs EFS backup in the following way:

The backup appliance uses the AWS Backup service to create a cloud-native backup of the file system, and saves this backup to the specified backup vault in the same AWS Region in which the source file system resides.

The backup is assigned AWS tags upon creation. Keys and values of AWS tags contain encrypted metadata that helps the backup appliance identify the related EFS file system backup.

If you configure the EFS backup policy to copy backup files to another AWS Region, the backup appliance copies the created backup to the target AWS Region in the same AWS account.
If you enable EFS indexing in the backup policy settings, the backup appliance performs the following operations:

Deploys a worker instance in an AWS Region in which the processed file system resides in an AWS account to which the file system belongs — that is, the production AWS account.

By default, the backup appliance selects the most appropriate network settings of AWS Regions in production accounts (for example, selects a VPC specified as a mount target for the processed file system). However, you can add specific worker configurations. For more information on worker instances, see Managing Worker Configurations.

Mounts the source file system on the worker instance.
Reads data from the file system using the worker instance, creates a catalog of files and folders (index) of the system, transfers the index to a backup repository and stores it in the native Veeam format.
The EFS index is associated with the cloud-native backup created at step 1 and the backup copy created at step 2. However, if the indexing session does not complete by the time a new backup session starts, a new indexing session is not launched and the backup appliance associates the created EFS index with 2 cloud-native backups and backup copies created by 2 backup sessions.

Note

By default, the backup appliance compresses data saved to backup repositories. To learn how to encrypt data stored in backup repositories, see Data Encryption.

When the indexing session completes, removes the worker instance from Amazon EC2.