Configuring Backups for Amazon S3 Object Storage Using the Commvault Cloud Infrastructure

You can back up your Amazon S3 object storage directly to the cloud, without configuring or installing backup gateways, using the Commvault Cloud infrastructure.

Start the Configuration Wizard

1. From the Commvault Cloud navigation pane, go to Service Catalog.

   The Service Catalog page appears.

2. On the Object Storage tile, click Configure.

   The Select an Object Storage Application page appears.

3. Click Amazon S3, and then click NEXT.

   The Amazon S3 Backup Overview page appears.

Select "Back up using Commvault Cloud infrastructure"

1. Select Back up using Commvault Cloud infrastructure.

2. Click Next.

   The Configure Permissions page of the configuration wizard appears.

Configure Permissions

1. Click the Launch CloudFormation Stack link to open the AWS account in the AWS console.

   Note

   If you do not have permission to create a role in the AWS account, copy the Launch CloudFormation Stack link and share it with your AWS IAM administrator.

2. Log on to the AWS console.

   The Quick create stack page appears.

3. Under Capabilities, read the information about the template, and then select the acknowledgment check box.

4. Click Create stack.

   Wait for the CloudFormation Stack to finish creating the MetallicTenantRole IAM role.

   The CloudFormation Stack creates the following policies, and then attaches the policies to MetallicTenantRole:

   • MetallicTenantRole-DocDBPolicy

   • MetallicTenantRole-EC2Policy

   • MetallicTenantRole-RDSPolicy

   • MetallicTenantRole-RedshiftPolicy

   • MetallicTenantRole-S3Policy

   • MetallicTenantRole-VPCPolicy

5. After the stack is created, on the Outputs tab of the AWS console, copy the ExternalID and IAMRole key values.

6. Return to the Commvault Cloud configuration wizard.

7. For Credentials, select existing credentials or create new credentials.

   Important

   The credentials must have an external ID and an IAM role ARN—the values that you copied from the Outputs tab of the AWS console in a preceding step:

   • If you select existing credentials, to verify that the credentials have an external ID and an IAM role ARN, click the edit button .

   • If you create new credentials, make sure to enter the external ID and the IAM role ARN.

   • If you create a new IAM role (to use instead of the MetallicTenantRole IAM role) and you attach the new role to the Commvault Cloud backup gateway that handles your Amazon EC2 backups, make sure to update the credentials with the new external ID.

8. Click Next.

   The Region page of the configuration wizard appears.

Region

1. Select the allowed regions for configuring your object storage client.

   Only the allowed regions where Commvault Cloud backup gateways are present are available to select.

2. Click Next.

   The Select Cloud Storage page of the configuration wizard appears.

Select Cloud Storage

Primary Copy

Select existing cloud storage or configure new cloud storage for the primary copy of your backups.

Only cloud storage options that are in the region you selected on the Region page are available to select.

To configure new cloud storage, do the following. Some settings are pre-populated and cannot be changed.

1. Click the add button .

   The Add cloud storage dialog box appears.

2. In Name, enter a descriptive name for the cloud storage.

3. For Storage class, select the storage class for the type of access that you want to have for the backup data.

4. In Bucket, enter name of the Amazon S3 bucket.

5. Click Save.

Secondary Copy

To store a secondary copy of the backup data for long-term retention, do the following:

1. Move the Secondary copy toggle key to the right.

2. For Storage location, select an existing storage location or create a new storage location.

   Important

   If you select a different region for the secondary copy, you will incur inter-region data transfer costs.

3. To create a storage location, do the following. Some settings are pre-populated and cannot be changed.

   1. Click the add button .

      The Add cloud storage dialog box appears.

   2. In Name, enter a descriptive name for the cloud storage.

   3. In Bucket, enter the name of the Amazon S3 bucket.

   4. For Storage Class, select the storage class for the type of access that you want to have for the backup data.

   5. Click Save.

4. Click Next.

   The Plan page of the configuration wizard appears.

Plan

Select an existing plan or create a new plan. A plan specifies the storage to back up the data to and other settings such as recovery point objective (RPO) settings.

The data is backed up to the primary copy, and then to the secondary copy only if an auxiliary copy job is run. The data will be retained based on the retention settings.

To create a plan, do the following:

1. Click the add button .

   The Add Plan dialog box appears.

2. In Plan name box, enter a descriptive name for the plan.

3. For the Plan settings, select pre-defined settings or create custom settings:

   • To select pre-defined settings, under Retention rules, select one of the following:

     1. Select Standard retention to retain the incremental backups for 1 month.

     2. Select Extended retention for optimized storage where the incremental backups of primary and secondary copies are retained for 1 month, and extended retention for monthly and yearly full backups.

        The Extended retention option is available only when the secondary copy backup is selected.

   • To create custom settings, select Custom plan, and then specify the following:

     1. For Retention, specify the amount of time to retain the backups.

     2. For Backups run every, specify how often to run backups.

   • Click Done.

4. Click Next.

   The Add Object Storage page of the configuration wizard appears.

Add Object Storage

1. In Object storage name, enter a descriptive name for the object storage client.

2. In Host URL, enter the service account URL, s3.amazonaws.com.

   To back up region-based data, enter the AWS service endpoint URL for the region in the format: s3.{region}.amazonaws.com.

3. Click Next.

   The Backup Content page of the configuration wizard appears.

Backup Content

You can add content by browsing, by selecting all the content, and by entering a custom path.

1. To browse for content, do the following:

   1. Click Add, and then select Browse.

      The Add content dialog box appears.

   2. Select the content.

   3. Click Save.

2. To select all content, click Add, and then select Select All.

3. To enter a custom path, do the following:

   1. Click Add, and then select Custom Path.

   2. In Enter custom path, enter the custom path for the content.

      For example, you can enter /bucket_name.

4. To exclude some of the content you selected, move the Specify exclusion toggle key to the right, and then add the exclusion.

5. To include some of the content that you excluded, move the Specify inclusion toggle key to the right, and then add the inclusion.

6. To back up the object-level ACLs, move the Back up ACL toggle key to the right.

7. Click Next.

   The Summary page of the configuration wizard appears.

Summary

1. Review the summary.

2. Click Finish.