Agentless, cloud-native backup for Amazon AWS
Post Reply
ggillette-rcps
Novice
Posts: 6
Liked: never
Joined: Sep 22, 2014 7:46 pm
Full Name: Greg Gillette
Contact:

immutable backup repositories in Veeam for AWS?

Post by ggillette-rcps »

Does Veeam for AWS support the 'immutable backups' feature of AWS buckets (Amazon S3 Object Lock)?

Mike Resseler
Product Manager
Posts: 6816
Liked: 900 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by Mike Resseler »

Hi Greg,

Not at this moment

Cheers
Mike

mfongemie
Novice
Posts: 4
Liked: never
Joined: Oct 28, 2020 2:21 pm
Full Name: Michael Fongemie
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by mfongemie »

Is this still the case?
Thanks.

nielsengelen
Veeam Software
Posts: 4165
Liked: 856 times
Joined: Jul 15, 2013 11:09 am
Full Name: Niels Engelen
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by nielsengelen »

This is still the case for now but is being looked into for a future release (no ETA for now though).
Personal blog: https://foonet.be
GitHub: https://github.com/nielsengelen

tcarracino
Novice
Posts: 7
Liked: never
Joined: Jan 20, 2021 1:15 am
Full Name: Tom Carracino
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by tcarracino »

Can we just lifecycle the backups from the S3 bucket into Glacier via policy?

Gostev
SVP, Product Management
Posts: 28163
Liked: 4971 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by Gostev » 1 person likes this post

No, the content of the bucket must be managed exclusively by Veeam.

tcarracino
Novice
Posts: 7
Liked: never
Joined: Jan 20, 2021 1:15 am
Full Name: Tom Carracino
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by tcarracino »

So that would include replication settings to another region or account correct?

100% hands off the bucket and it is managed by Veeam?

dalbertson
Veeam Software
Posts: 437
Liked: 146 times
Joined: Jul 21, 2015 12:38 pm
Full Name: Dustin Albertson
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by dalbertson »

You could do s3 replication to another region.

Could you describe your use case for this?
Dustin Albertson | Manager - Cloud & Applications | Veeam Product Management, Alliances

tcarracino
Novice
Posts: 7
Liked: never
Joined: Jan 20, 2021 1:15 am
Full Name: Tom Carracino
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by tcarracino »

It is my understanding that it is a best practice in AWS to replicate your backups (Snapshots) "Out of Region / Out of Account".

That was how I was taught and it is the only way I know of to protect your data if the account itself is compromised. (Google "code spaces" hack from 2014)

Similar to off siting your data in a conventional backup use case, But in AWS that is done to a "Backup Account" in another region preferably.

I always recommend setting up log accounts and an organization (Such as Control Tower) if the account is big enough, and of Couse an audit account with cloud trail logs going there.

In many smaller instances you can combine these items (Audit account / backup account) as it should be another account that is locked down and uses MFA, etc.

This way you always have your cloud trail audit logs (So you can see what happened) and your snapshots so you can recover.

I also have setup a VPC in that other region (In the main account) and you can ask AWS to replicate your workspaces disk images as well. (Takes about a week)

Hope that helps!

Love VEEAM! 8)

Tom

dalbertson
Veeam Software
Posts: 437
Liked: 146 times
Joined: Jul 21, 2015 12:38 pm
Full Name: Dustin Albertson
Contact:

Re: immutable backup repositories in Veeam for AWS?

Post by dalbertson »

Great, thank you for the details. And yes it is important to make sure there are multiple layers of separation and copies.

We will take note of this and as we move forward we can update this thread with details.

Thank you for your support and enthusiasm.
Dustin Albertson | Manager - Cloud & Applications | Veeam Product Management, Alliances

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest