Agentless, cloud-native backup for Amazon Web Services (AWS)
Post Reply
ggillette-rcps
Novice
Posts: 7
Liked: 1 time
Joined: Sep 22, 2014 7:46 pm
Full Name: Greg Gillette
Contact:

immutable backup repositories in Veeam for AWS?

Post by ggillette-rcps »

Does Veeam for AWS support the 'immutable backups' feature of AWS buckets (Amazon S3 Object Lock)?
Mike Resseler
Product Manager
Posts: 8044
Liked: 1263 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by Mike Resseler »

Hi Greg,

Not at this moment

Cheers
Mike
mfongemie
Novice
Posts: 4
Liked: never
Joined: Oct 28, 2020 2:21 pm
Full Name: Michael Fongemie
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by mfongemie »

Is this still the case?
Thanks.
nielsengelen
Product Manager
Posts: 5619
Liked: 1177 times
Joined: Jul 15, 2013 11:09 am
Full Name: Niels Engelen
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by nielsengelen »

This is still the case for now but is being looked into for a future release (no ETA for now though).
Personal blog: https://foonet.be
GitHub: https://github.com/nielsengelen
tcarracino
Novice
Posts: 7
Liked: never
Joined: Jan 20, 2021 1:15 am
Full Name: Tom Carracino
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by tcarracino »

Can we just lifecycle the backups from the S3 bucket into Glacier via policy?
Gostev
Chief Product Officer
Posts: 31460
Liked: 6648 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by Gostev » 1 person likes this post

No, the content of the bucket must be managed exclusively by Veeam.
tcarracino
Novice
Posts: 7
Liked: never
Joined: Jan 20, 2021 1:15 am
Full Name: Tom Carracino
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by tcarracino »

So that would include replication settings to another region or account correct?

100% hands off the bucket and it is managed by Veeam?
dalbertson
Veeam Software
Posts: 492
Liked: 175 times
Joined: Jul 21, 2015 12:38 pm
Full Name: Dustin Albertson
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by dalbertson »

You could do s3 replication to another region.

Could you describe your use case for this?
Dustin Albertson | Director of Product Management - Cloud & Applications | Veeam Product Management, Alliances
tcarracino
Novice
Posts: 7
Liked: never
Joined: Jan 20, 2021 1:15 am
Full Name: Tom Carracino
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by tcarracino »

It is my understanding that it is a best practice in AWS to replicate your backups (Snapshots) "Out of Region / Out of Account".

That was how I was taught and it is the only way I know of to protect your data if the account itself is compromised. (Google "code spaces" hack from 2014)

Similar to off siting your data in a conventional backup use case, But in AWS that is done to a "Backup Account" in another region preferably.

I always recommend setting up log accounts and an organization (Such as Control Tower) if the account is big enough, and of Couse an audit account with cloud trail logs going there.

In many smaller instances you can combine these items (Audit account / backup account) as it should be another account that is locked down and uses MFA, etc.

This way you always have your cloud trail audit logs (So you can see what happened) and your snapshots so you can recover.

I also have setup a VPC in that other region (In the main account) and you can ask AWS to replicate your workspaces disk images as well. (Takes about a week)

Hope that helps!

Love VEEAM! 8)

Tom
dalbertson
Veeam Software
Posts: 492
Liked: 175 times
Joined: Jul 21, 2015 12:38 pm
Full Name: Dustin Albertson
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by dalbertson »

Great, thank you for the details. And yes it is important to make sure there are multiple layers of separation and copies.

We will take note of this and as we move forward we can update this thread with details.

Thank you for your support and enthusiasm.
Dustin Albertson | Director of Product Management - Cloud & Applications | Veeam Product Management, Alliances
mrt
Enthusiast
Posts: 53
Liked: 2 times
Joined: Feb 10, 2011 7:27 pm
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by mrt »

is this possible yet? is it on the road map? thanks
nielsengelen
Product Manager
Posts: 5619
Liked: 1177 times
Joined: Jul 15, 2013 11:09 am
Full Name: Niels Engelen
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by nielsengelen »

It is planned to have this in the next release of VB for AWS.
Personal blog: https://foonet.be
GitHub: https://github.com/nielsengelen
mrt
Enthusiast
Posts: 53
Liked: 2 times
Joined: Feb 10, 2011 7:27 pm
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by mrt »

v5.1.0.39 was released November 17th, 2022 but I don't see any immutable options, am I missing them? Thanks
Gostev
Chief Product Officer
Posts: 31460
Liked: 6648 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by Gostev »

He meant the next major release.
Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest