You can restore an Amazon RDS instance to a different region in a different AWS cloud account. To do so, you need to make sure that the backup plan associated with the instance has a secondary snapshot copy and the replication is enabled on the instance. Then, while restoring the instance, select a different cloud account as destination.
Before You Begin
-
Create a secondary snapshot copy on the associated backup plan and enable replication on the instance. For more information, see configuring cross-account restores.
-
To restore the instance to a different cloud account and the database is encrypted, obtain the AWS KMS key ARN for encrypting the database in the new account. For information about using a KMS key for different accounts, go to Allowing users in other accounts to use a KMS key, on the AWS website.
Note
Commvault Cloud recommends restoring an Amazon RDS instance to a different cloud account using STS Assume role based authentication for the target account.
Procedure
-
From the navigation pane, go to Protect > Databases.
The Overview page appears.
-
On the Instances tab, in the Actions column for the instance, click the action button
, and then click Restore.
The Backup content page appears.
-
On the top-right of the page, click Change source.
The Change source dialog box appears.
-
From the restore from copy list, select the secondary snapshot copy, and then click OK. Based on the Mapping provided in the secondary snapshot copy, the region on the backup content page gets updated.
-
To restore a snapshot, click the region, and then select the snapshot that you want to restore.
-
Click RESTORE.
The Restore options dialog box appears.
-
To restore the instance to a different cloud account, from the Cloud account list, select a different destination cloud account.
The cloud account that is displayed when the dialog box first appears is the source account that owns the backup.
-
In the Database identifier box, enter a name for the instance that will be created from the snapshot.
-
To make the instance accessible from the public internet, move the Public accessibility toggle key to the right.
-
To specify the availability zone (AZ) that you want to deploy the standby instance to, in the Advanced section, do one of the following:
-
To deploy to multiple availability zones, move the Multi-AZ deployment toggle key to the right.
-
To select the availability zone, from the Target availability zone list, select the availability zone from the new region that you want to create the instance in.
-
-
To change the compute and memory capacity of the instance, from the Instance class list, select the instance class.
-
To change the storage type, from the Storage type list, select the storage type.
-
To define the subnet group, in the Subnet group box, type the subnet group. Specifying a subnet group may limit the choice of availability zones.
-
In the KMS Key ARN box, enter the KMS encryption key.
-
To specify a database parameter group to associate with this database instance, in the Database parameter group box, type the database parameter group name.
-
To specify an option group to associate with the restored database instance, in the Option group box, type the option group name.
-
If the restored instance will have Microsoft SQL Server Integration Services (SSIS) enabled, type the domain in the Domain box.
-
To specify the instance profile associated with the underlying EC2 instance of an RDS Custom instance, in the Custom Iam Instance Profile box type the profile name.
-
To specify the elastic IP address to be associated with the underlying EC2 instance of an RDS Custom instance, in the Elastic IP box type the IP address.
-
If the restored instance will have SSIS enabled, type the domain IAM role in the Domain IAM role box.
-
In the Port box, enter the port number.
-
To enable automatic minor version engine upgrades, move the Auto minor version upgrade toggle to the right.
-
To define which subnets and IP ranges the cluster or instance can use in the Amazon virtual private cloud (VPC), in the VPC security group IDs box, enter the names of the security group IDs.
You can add multiple security groups, separated by commas. For example, you can enter "sg-1122,sg-3344".
-
Click SUBMIT.