To back up and restore PostgreSQL data on the Amazon cloud application, verify that your environment meets the requirements.
Before Configuring Backups, Verify Backup Gateway Region and Access to the Database
Before configuring backups of the database, do the following:
-
Verify that the AWS backup gateway is deployed in the same region and VPC as the AWS database.
-
Verify that the AWS backup gateway can access the AWS databases. For more information, go to Automatically connecting an EC2 instance and an RDS database on the Amazon RDS website.
-
See the following:
-
For instructions to create an AWS backup gateway, which is part of configuring backups, see the "Configuring Backups" page for the database, under AWS Cloud Databases. For example, Configuring Backups for Amazon DocumentDB Instances.
Software Requirements
-
Packages required on access nodes:
-
Virtual Server Agent
-
PostgreSQL Agent
-
-
Access nodes that you run backup and restore operations on must have one of the following operating systems:
|
Operating system |
Processor architecture |
|---|---|
|
Amazon Linux 2023 AMI |
Note Supported only from PostgreSQL 15.x onwards |
|
Amazon Linux 2 AMI (HVM) - Kernel 5.10, SSD Volume Type |
|
|
CentOS 8.x, 7.x |
|
|
Oracle Linux Enterprise 9.x, 8.x, 7.x |
|
|
Red Hat Enterprise Linux 9.x, 8.x, 7.x |
|
|
Rocky Linux 9.x, 8.x |
|
|
Windows 2022, 2019, 2016, 2012 |
|
Note
If you have network configuration enabled on the access nodes, before you deploy a Windows or a Linux proxy, configure a firewall on the cloud proxy and on-premises.
Supported PostgreSQL Versions
From PostgreSQL version 12.x - 17.x
User Account Requirements
-
For DumpBasedBackupSet, verify that the PostgreSQL instance has a user account with sufficient privileges to perform the following:
-
Perform backup and restore operations of the database objects as part of the subclient content
The following table illustrates the necessary privileges the user account should have to perform backup and restore operations:
Operations
Privileges PostgreSQL User Should Have
Backup
CREATEDB, CREATEROLE
Restore
CREATEDB, CREATEROLE, INHERIT, LOGIN
CONNECTION LIMIT, if set, should at least have a value of 2.
Initially, the user account credentials are provided during the instance configuration after the installation of the agent. You can change the user account at the instance level.
Note
You may need to grant other privileges to the PostgreSQL backup user to secure the objects in the database. To know more about database roles and privileges, see PostgreSQL documentation.
-
-
You require SELECT privileges on all tables and objects within the schema or databases being backed up.
The following statements are valid for PostgreSQL:
-
Version 14 or above
- GRANT pg_read_all_data to user_name;
-
Version 13 or below
- GRANT SELECT ON ALL TABLES IN SCHEMA schema_name TO user_name;
-