Step 3. Configure Backup Source Settings

At the Sources step of the wizard, select an AWS account that contains EC2 instances you plan to protect, specify AWS Regions where EC2 instances reside, choose EC2 instances to back up, and specify EBS volumes of the selected EC2 instances to exclude from the backup policy.

Step 3a. Specify AWS Account

In the Accounts section of the Sources step of the wizard, select the AWS account to which the EC2 instances you plan to protect belong. For an AWS account to be displayed in the list of available accounts, it must be included into the tenant as described in section Adding Tenants.

Note

To perform the backup operation, Veeam Data Cloud for AWS uses the permissions of the IAM role that was created in the AWS account during CloudFormation template deployment.

Step 3b. Select AWS Regions

In the Regions section of the Sources step of the wizard, select AWS Regions where EC2 instances that you plan to back up reside:

Click Choose regions.
In the Choose regions window, select the necessary AWS Regions from the Available Regions list, and click Add.
To save changes made to the backup policy settings, click Apply.

Step 3c. Select EC2 Instances

In the Resources section of the Sources step of the wizard, specify the backup scope — select EC2 instances that Veeam Data Cloud for AWS will back up:

Click Choose resources to protect.
In the Choose resource to protect window, choose whether you want to back up all EC2 instances from AWS Regions selected at step 3b of the wizard or only specific EC2 instances.

If you select the All resources option, Veeam Data Cloud for AWS will regularly check for new EC2 instances launched in the selected regions and automatically update the backup policy settings to include these instances into the backup scope.

If you select the Protect only following resources option, you must also specify the resources explicitly:

Use the Type drop-down list to choose whether you want to add individual EC2 instances or AWS tags to the backup scope.

If you select the Tag option, Veeam Data Cloud for AWS will back up only those EC2 instances that have specific tags and reside in the selected regions.

Use the Name or ID drop-down list to find the necessary resource, and then click Protect to add the resource to the backup scope.

For a resource to be displayed in the list of available resources, it must reside in an AWS Region that has ever been specified in any backup policy. Otherwise, the only option to discover the available resources is to click Browse to select specific resources from the global list and to wait for Veeam Data Cloud for AWS to populate the resource list.

Tip

You can simultaneously add multiple resources to the backup scope. To do that, click Browse to select specific resources from the global list, select check boxes next to the necessary EC2 instances or AWS tags in the list of available resources, and then click Protect.

If the list does not show the resources that you want to back up, click Rescan to launch the data collection process. As soon as the process is over, Veeam Data Cloud for AWS will update the resource list.

If you add an AWS tag to the backup scope, Veeam Data Cloud for AWS will regularly check for new EC2 instances assigned the added AWS tag and automatically update the backup policy settings to include these instances in the scope. However, this applies only to EC2 instances from the AWS Regions selected at step 3b of the wizard. If you select a tag assigned to EC2 instances from other regions, these instances will not be protected by the backup policy. To work around the issue, either go back to step 3b and add the missing regions, or create a new backup policy.

To save changes made to the backup policy settings, click Apply.

Step 3d. Select EBS Volumes

In the Volumes section of the Sources step of the wizard, you can exclude from processing EBS volumes attached to the selected EC2 instances:

Set the Exclude volumes toggle to On.
In the Choose volumes to exclude window, choose whether you want to exclude system volumes of the selected EC2 instances from processing.
To exclude specific EBS volumes, specify the EBS volumes explicitly:

Use the Type list to choose whether you want to exclude individual EBS volumes or AWS tags from the backup scope.

If you select the Tag option, Veeam Data Cloud for AWS will exclude from processing only those EBS volumes that have specific tags and reside in the selected regions.

Use the Name or ID drop-down list to find the necessary resource, and then click Exclude to exclude the resource from the backup scope.

For a resource to be displayed in the list of available resources, it must reside in an AWS Region that has ever been specified in any backup policy. Otherwise, the only option to discover the resources is to click Browse to select specific resources from the global list and to wait for Veeam Data Cloud for AWS to rescan the region and to populate the resource list.

Tip

You can simultaneously exclude multiple resources from the backup scope. To do that, click Browse to select specific resources from the global list, select check boxes next to the necessary EBS volumes or AWS tags in the list of available resources, and then click Exclude.

If the list does not show the resources that you want to exclude, click Rescan to launch the data collection process. As soon as the process is over, Veeam Data Cloud for AWS will update the resource list.

If you exclude an AWS tag from the backup scope, Veeam Data Cloud for AWS will regularly check for new EBS volumes assigned the excluded AWS tag and automatically update the backup policy settings to exclude these volumes from the scope.

To save changes made to the backup policy settings, click Apply.

Important

For Windows EC2 instances running VSS-aware applications, it is recommended that you do not exclude specific volumes other than system (root) volumes, since there is a limitation on the AWS System Manager side — only system volumes can be excluded. For more information on creating VSS snapshots, see AWS Documentation.