Backing up data

R-Cloud enables you to back up your AWS Parameter Store data securely and efficiently.

Configuring the SaaS application for backup operations

R-Cloud starts protecting the parameters in AWS Parameter Store after you complete the following tasks:

  1. Add the module as a source in R-Cloud. For instructions see Adding the module to R-Cloud.

  2. Add your AWS account as a source in R-Cloud. For instructions see Managing AWS accounts.

    Note  When adding the AWS account as a source, make sure you sign into your AWS account by using the account root user or an IAM user with administrative permissions.

  3. Edit the AWS JSON policy document. For instructions, see Editing the HycuPolicy JSON policy file.

  4. Assign a policy to the related SaaS application. For instructions, see Defining your backup strategy.

Editing the HycuPolicy JSON policy file

In the IAM Management Console, click Roles, and then HycuRole. Click HycuPolicy to edit the policy. Append the following statements to the existing HycuPolicy JSON policy file:

  • Statement 1:

{
    "Effect":"Allow",
    "Action":[
        "ssm:DescribeParameters",
        "ssm:GetParameter",
        "ssm:PutParameter",
        "ssm:ListTagsForResource",
        "ssm:AddTagsToResource",
        "ssm:LabelParameterVersion",
        "ec2:DescribeRegions"
    ],
    "Resource":"*"
}

  • Statement 2. Add this statement if you also want to protect the secured parameters:

{
    "Effect":"Allow",
    "Action":[
        "kms:Decrypt",
        "kms:Encrypt"
    ],
    "Resource":"*"
}

  • Statement 3. Add this statement if you also want to protect the aws:ec2:image data type parameters.

{
    "Effect":"Allow",
    "Action":[
        "ec2:DescribeImages"
    ],
    "Resource":"*"
}

The resource type that is being backed up is Parameter.

The following configurable parameter metadata types are protected:

  • Tags

  • Policies

When creating a backup, the following APIs are called:

  • get_parameter

  • list_tags_for_resource

Backing up SaaS application data

Limitation

Only backup data can be stored to the automatically created targets (and not copies of backup data or archive data).

To access the SaaS panel, in the navigation pane, click SaaS SaaS.

Procedure

  1. Select the SaaS applications and/or resources that you want to back up.

    Note  If you want to narrow down the list of displayed SaaS applications, use the filtering options as described in Filtering and sorting data.

  2. Click Set Policy Set Policy. The Set Policy dialog box opens.

  3. From the list of available policies, select the preferred policy.

  4. Click Assign to assign the policy to the selected SaaS applications and/or resources.

After you assign a policy to a SaaS application, a backup task starts immediately. Subsequent backups are scheduled according to the values defined in the policy.

If required, you can also perform a manual backup of individual SaaS applications and/or resources at any time. For details, see Performing manual backups.