Configuring Cross-Account and Cross-Region Restore of an Amazon RDS Snapshot Copy

You can restore Amazon RDS snapshots to a different Amazon Web Services account by copying or sharing the snapshot to a different geographic region. If you share the snapshot, tags attached to the source snapshot are not copied to the destination account.

Configuring cross-account and cross-region restores include creating a secondary copy, adding the region mapping, and then enabling cross account copy.

Note

To replicate a copy of encrypted Amazon RDS snapshots, the user can have either the cvlt-rds alias or the cvlt-master alias at the destination region in the source and destination account. If the user is using the key with a different alias, then the user must create a tag for the KMS key with the tag name cvlt-rds or cvlt-master at the destination region.
The IAM user must be added as a key user for the KMS key used for the destination region. For information about using a KMS key for different accounts, go to Allowing users in other accounts to use a KMS key, on the AWS website.

Before You Begin

If the source Amazon RDS instance is using a Custom Option Group, then verify that a Custom Option Group with a similar name and similar parameters exists at the destination region.
The source account and destination accounts must be configured with an access key ID and secret access key pair or an STS role ARN.

Create a Secondary Snapshot Copy

From the navigation pane, go to Protect > Databases.

The Overview page appears.
On the Instances tab, click the instance.

The Overview page of the instance appears.
In the General tile, click on the backup plan associated with the instance.

The Overview page of the backup plan appears.
On the Storage policies tab, in the Copies area, click Add > Snap copy.

The Add snapshot copy dialog box appears.
In the Name box, type a name for the secondary snapshot copy.
In the Copy type area, select Vault/Replica.
From the Storage list, select a storage.
From the Backups to copy list, select a backup job type.
From the Source list, select the primary snapshot copy.
To select a date from which you want to copy the backup types, do one of the following:
- To copy the backup types from the initial backup date, select Protect from initial backup date.
- To select a specific date, select Protect from a specific date and then set the Start time.
For the Retention rules, select either Retention period or Number of snap recovery points, and then add the rules.
To specify additional backups, such as weekly full backups, move the Extended Retention rules toggle key to the right, and then add rules.
To add mappings, in the Mappings field, click Add.

The Add Mappings dialog box appears.
1. From the Snapshot vendor list, select Amazon web Services.
2. From the Source Region list, select the source region from which you want to restore the snapshot.
3. From the Target Region list, select a target region to which you want to restore the snapshot.
4. Click ADD.
5. Review the Mappings added, and then click SAVE.
In the Add snapshot copy dialog box, click SAVE.

Result

Replication will be enabled and the region mapping will be added on the associated instance.

Enabling Cross-Account Restores

From the navigation pane, go to Protect > Databases.

The Overview page appears.
On the Instances tab, click the instance.

The Overview page of the instance appears.
On the Instance groups tab, click the instance group for which you want to view the snapshot options.

The Overview page of the instance group appears.
In the Snapshot tile, move the Cross account copy toggle key to the right.

The Cross account operations dialog box appears.
Under Choose action, select any of the following:
- Share only: This option only shares the snapshot copy to the destination account. Tags associated with the source snapshot will not be shared.
- Full copy: this option copies the complete snapshot along with the associated tags to the destination account.
From the Destination account list, select the target cloud account.
Click SAVE.

Viewing and Editing the Region Mapping

From the navigation pane, go to Protect > Databases.

The Overview page appears.
On the Instances tab, click the instance.

The Overview page of the instance appears.
On the Instance groups tab, click the instance group for which you want to view the snapshot options.

The Overview page of the instance group appears.
In the Snapshot section, complete the following:
- By default, Replication will be enabled. If it is not enabled, move the toggle key to the right.
- To edit the existing mapping, do the following:
  1. Click Edit .
    
    The Edit source region dialog box appears.
  2. From the Destination region list, select the target region, and the click SAVE.
- To add new mapping, do the following:
  1. In the Region map area, click Add.
    
    The Add a region mapping dialog box appears.
  2. From the Source region and Destination region lists, select a source AWS region and a target AWS region, and then click SAVE.
- To delete a mapping, do the following:
  1. Add a new mapping.
  2. Next to the old mapping, click Delete .