Configuring Backups for Amazon DynamoDB Instances Using the Commvault Cloud Infrastructure

You can back up your Amazon DynamoDB instances directly to the cloud, without configuring or installing backup gateways, using the Commvault Cloud infrastructure.

Start the Configuration Wizard

1. From the Command Center navigation pane, go to Protect > Databases.

   The Instances page appears.

2. In the upper-right area of the page, click Add instance, and then select Cloud database service.

   The Add Cloud DB Instance page appears.

3. Select Amazon Web Services and then click NEXT.

   The Select a Database Service page appears.

4. Select DynamoDB and then click NEXT.

   The Select Backup Method page appears.

Select "Back up using Commvault Cloud infrastructure"

1. Select Back up using Commvault Cloud infrastructure.

2. Click NEXT.

   The Configure Permissions page of the Configure Amazon database - DynamoDB configuration wizard appears.

Configure Permissions

1. Click the Launch the CloudFormation Stack link to open the AWS account in the AWS console.

   Note

   If you do not have permission to create a role in the AWS account, copy the Launch the CloudFormation Stack link and share it with your AWS IAM administrator.

2. Log on to the AWS console.

   The Quick create stack page appears.

3. Under Capabilities, read the information about the template, and then select the acknowledgment check box.

4. Click Create stack.

   Wait for the CloudFormation Stack to finish creating the MetallicTenantRole IAM role.

   The CloudFormation Stack creates the following policies, and then attaches the policies to MetallicTenantRole:

   • MetallicTenantRole-DocDBPolicy

   • MetallicTenantRole-DynamoDBPolicy

   • MetallicTenantRole-EC2Policy

   • MetallicTenantRole-RDSPolicy

   • MetallicTenantRole-RedshiftPolicy

   • MetallicTenantRole-S3Policy

   • MetallicTenantRole-VPCPolicy

5. After the stack is created, on the Outputs tab of the AWS console, copy the ExternalID and IAMRole (ARN of MetallicTenantRole) key values.

6. Return to the Commvault Cloud configuration wizard.

7. For Credential, select existing credentials or create new credentials.

   Important

   The credentials must have an external ID and an IAM role ARN—the values that you copied from the Outputs tab of the AWS console in the preceding step:

   • If you select existing credentials, to verify that the credentials have an external ID and an IAM role ARN, click the edit button .

   • If you create new credentials, make sure to enter the external ID and the IAM role ARN.

   • If you create a new IAM role (to use instead of the MetallicTenantRole IAM role) and you attach the new role to the Commvault Cloud backup gateway that handles your Amazon DynamoDB instance backups, make sure to update the credentials with the new external ID.

8. Click NEXT.

   The Region page of the configuration wizard appears.

Region

1. Select the region that the clusters reside in.

   Only the regions where Commvault Cloud backup gateways are present are available to select.

2. Click NEXT.

   The Select Cloud Storage page of the configuration wizard appears.

Cloud Storage

To review the supported combinations of primary and secondary storage, see Commvault Cloud Storage Options.

Primary Copy

1. For the primary copy of the backup data, select an existing S3 storage bucket or create a new S3 storage bucket.

   Steps to create an S3 storage bucket

   1. Click the add button .

      The Add cloud storage dialog box appears.

   2. From the Type list, select Amazon S3.

   3. In Name, enter a descriptive name for the cloud storage.

   4. For Storage class, select the storage class for the type of access that you want to have for the backup data.

   5. The Region, Service host, Authentication, and Credentials will be selected automatically.

   6. In Bucket, enter the Amazon S3 bucket name, and then click DETECT.

   7. Click SAVE.

2. If you do not want to create a secondary copy, click NEXT.

Secondary Copy

Decide whether to store a secondary copy of the backup data for long-term retention.

1. To add a secondary copy of the backup data, move the Secondary copy toggle key to the right.

2. For Storage location, select an existing storage location or create a new storage location.

   Steps to create a new storage location for secondary copy

   1. Click the add button .

      The Add cloud storage dialog box appears.

   2. From Type, select a storage type.

      • For Amazon S3, specify the following:

        1. In Name, enter a descriptive name for the cloud storage.

        2. For Storage Class, select the storage class for the type of access that you want to have for the data.

        3. The Region, Service host, Authentication, and Credentials will be selected automatically.

        4. In Bucket, enter the Amazon S3 bucket name, and then click DETECT.

      • For Air Gap Protect, specify the following:

        1. From the Cloud storage provider list, select a cloud service provider.

        2. For Storage Class, select the storage class for the type of access that you want to have for the data.

        3. From the Region list, select a region of your cloud storage.

   3. Click SAVE.

3. Click NEXT.

   The Plan page of the configuration wizard appears.

Plan

A backup plan specifies the storage to back up the data to and other settings such as recovery point objective (RPO) settings.

1. Select an existing backup plan or create a new backup plan.

   Steps to create a backup plan

   1. Click the add button .

      The Add plan dialog box appears.

   2. In the Plan name box, enter a descriptive name for the backup plan.

   3. For the backup plan settings, select pre-defined settings or create custom settings:

      • To select pre-defined settings, under Retention rules, select one of the following:

        • Select Standard retention to retain the incremental backups for 1 month.

      • To create custom settings, select Custom plan, and then specify the following:

        • For Retention, specify the amount of time to retain the backup jobs.

        • For Backups run every, specify how often to run backups.

   4. Click DONE.

2. Click NEXT.

   The Cloud Account page of the configuration wizard appears.

Cloud Account

The cloud account is used to access the databases for discovery, backups, and other operations.

1. In Cloud account name, enter the name of the account.

2. Click NEXT.

   The Instance Details page of the configuration wizard appears.

Instance Details

1. In the Instances box, update the instance name as required.

2. In the Staging bucket path box, enter the path to stage the data temporarily. Alternatively, click Browse to locate the path.

   Note

   Staging path should be of the same region as the S3 path.

3. Click NEXT.

   The Backup Content page of the configuration wizard appears.

Backup Content

1. Review the list of tables that will be protected.

2. Click NEXT.

   The Summary page of the configuration wizard appears.

Summary

1. Review the summary.

2. Click FINISH.