RDS & Aurora Backup

Introduction

In the organization, backups of databases running on AWS RDS and Aurora are managed through the AWS Backup service. or each account with such a database, infrastructure has been applied using the Terraform module, consisting of:

• AWS Backup Vault - used for storing executed snapshots;

• AWS Backup Plan - used for storing configuration and rules for performing backups;

• AWS IAM Role - used to grant the AWS Backup service appropriate permissions;

• AWS KMS Key - used for encrypting the performed backups.

Default configuration

Initiating a backup

If you want to create a new backup plan (additional on an existing account or configure the default one for a new account), you should:

1. Create the necessary directories in the Git repository;

2. Add Terraform files;

3. Initialize the project;

4. Apply the project.

Restore

Monitoring

For monitoring backups, a Grafana dashboard has been prepared: link. Based on the provided metrics, alerts have also been set up for backup execution issues for each account.