Skip to main content
Druva Documentation

Create Backup Policies

This article provides a step-by-step guide on how to create a backup policy for your AWS workloads in Druva CloudRanger. You can create policies to backup your Amazon EBS, EC2, RDS, and Redshift resources. 

Creating a backup policy

Step 1: On the left navigation pane, select Backup Policies.

  • On the Backup Policies page, click Create.

1BKedit.png

Step 2: Specify the backup Schedule.

Backup1.png

  • Add a Name and a brief Description for your policy.
  • Specify the backup Frequency.

Field

Description

Create Backup Every

Choose the backup frequency by day, week, month, or year.

For example:
Backup every week on Monday every hour at 30 minutes past the hour.
Backup every month on the 1st day of the month every 30 minutes.

Backup Window

[Optional] Specify the backup from and to time in HH:MM notation.

Note:  This field applies only if you specify weekly backup every hour in the Create Backup Every field.

Time Zone

Select the time zone that applies to the backup frequency specified.

  • Click Save & Continue.

Step 3: Specify the backup Retention criteria.

retention.png

Note: Druva CloudRanger follows the Grandfather-Father-Son (GFS) retention model. For more information on retention, please see About Retention for Backup Policies.
  • Specify the Retention criteria. The standard retention options are pre-populated that you can modify based on your business requirements.

Field

Description

Tiered Retention

Select this option to specify the criteria for tiered retention of backups.

  • All backups retained for: Select the retention duration in hours, days, weeks, months, or years.
  • Select the retention criteria for Weekly, Monthly, or Yearly Backups.

You can choose to modify the default retention duration that is pre-populated.

Never delete

Select this option to retain snapshots indefinitely.

Save extra copies to other regions

  • Select this checkbox to create additional copies of your AWS backups in multiple regions.
  • Specify up to two additional AWS regions to create copies in.

Save an extra copy to another account

 

  • Select the checkbox to create additional copies of your AWS backups in another CloudRanger account.
  • Specify the AWS region to create copies in.
Note: Cross-region and cross-account backups are not supported for Redshift instances.
  • Click Save & Continue.

Step 4: Specify the Resources for backup.

Resources2.png

  • On Include Resources, click Add to identify resources that you wish to include in the backup.

    IdentifyRes.png
     
  • On the Identify Resources page, specify the filter criteria to identify specific resources to include or exclude:
How Include/Exclude conditions apply on Druva CloudRanger
  • You can create multiple include and exclude rules.
  • Include rules: When multiple include rules are defined, this translates to an ‘OR’ condition. In other words, resources are matched against each include rule, and do not have to meet all specified conditions concurrently.
  • Exclude rules: Exclude rules take precedence when the same resource is matched based on the include and exclude criteria selected.
    An exception to this is when an EC2 resource is selected within include and an EBS volume within exclude. In such a scenario, the EBS volume that is part of EC2 will not be excluded from the backup.
  • When multiple tags are defined as part of include/exclude, this translates to an ‘AND’ condition.

Field

Description

Find Resource types

Select the Resource Type, for example, EBS Volume, EC2, RDS, or Redshift.
You may select All resource types to filter resources across resource types.

In account

Select the CloudRanger account associated with the AWS resources to be specified.
You may select All accounts to identify resources across accounts.

And in region

Select the applicable AWS regions, or select All regions.

Match

Select the match criteria by Resource IDs, Tags, VPC IDs, Subnet IDs, or select All resources.

Based upon the Match selected, you will need to specify the criteria values appropriate to that criteria.
For example:
Tags: Backup Type; Values: Daily
VPC IDs: Select by VPC IDs or VPC Name

  • Similarly, on Exclude Resources, click Add to identify specific resources that you wish to exclude from the backup.
  • The resources identified are then displayed under Include or Exclude Resources, based on your selection criteria.
  • To eliminate a specific resource in the list from your backup policy, select the checkbox against that resource, and click Remove.

    include2.png
Note: The Backup Copy Encryption is applicable only if one or more resources included in the policy is encrypted, and a backup is to be generated. If the source resource is encrypted, then an Encryption Key is applied to the backup operation.

The Backup Copy Encryption options are displayed only if a cross-region or cross-account backup is to be generated for encrypted snapshots.

  • To backup encrypted resources, you will need to define the association of keys between the source and the target regions for that backup.
    To do this, select the Target Key for each target region specified.

Encryption2.png

  • Under Resource Backup Options, you have the option to create backups of EC2 resources as AMIs or as snapshots. In the case of AMIs, you may also select your reboot preferences.
  • Click Save & Continue.

Step 5: Specify Additional Options for the backup.

PolTags1.png

  • Select the Execute VSS Consistent Scripts (Windows Only) checkbox to generate consistent snapshots for any Windows server with VSS installed.
Note: If the selected Backup Policy has servers defined that do not have VSS installed, then a standard AWS EBS snapshot is generated. For more information, please see Generate VSS consistent snapshots for Windows servers.
  • Under Add Tags to Backups specify the tags to be applied to each backup generated by the policy. Tags act as metadata to help identify and organize your AWS resources.
    Based on the Key selected, you will need to specify the appropriate Value. For example:
    Key: Created by Policy; Value: New
    Key: Origin; Value: Specify Origin ID
  • Select the Inherit tags from Source checkbox to inherit or retrieve tags from the Origin servers and apply them to backups generated by the policy.
Note: To manage tags on existing snapshots, please refer to AWS Management Console - Tag Editor.
  • Click Save.

The backup policy is now successfully defined and is displayed on the main Backup Policies page with the State toggle set to Active.

Modify backup policy state

You can choose to set a backup policy to Active or Disable it. When a new Backup Policy is defined, the State toggle is set to Active by default.

Note: Disabling a policy suspends all associated activities including backup retention and cleanup.

To modify the state of the backup policy, click the State toggle icon against the backup policy.

Active

Toggle1.PNG

Disabled

Toggle2.png

BKState.png