JA EN
shiichan

FSx for NetApp ONTAP Backups Now Fit in Logically Air-Gapped Vaults!

AWS What's New ★★★★ View Markdown
#aws#infrastructure#security

Hi everyone, it's Shii-chan! I found some good news about data protection today, so let me share it with you!

AWS What's New aws.amazon.com

What was announced?

In AWS What's New, AWS Backup announced that its logically air-gapped vault now supports Amazon FSx for NetApp ONTAP.

That means you can store backups of your FSx for NetApp ONTAP volumes in a logically air-gapped vault.

The story so far

A logically air-gapped vault is a type of AWS Backup vault that lets you share backups securely across accounts and AWS Organizations. Until now, FSx for NetApp ONTAP volumes were not among the resources you could protect with it.

What changes

If you run FSx for NetApp ONTAP, you can now keep isolated, immutable backups to prepare for data loss events!

  • Backups are immutable and locked by default
  • Encryption uses either AWS owned keys or customer-managed keys
  • You can store them in the same account, or in other accounts and Regions
  • The account you share with can restore directly, without copying the backup first

This is good news for teams that want shorter recovery times, or that have compliance and disaster recovery requirements.

Dive Deep

There are three ways to get started:

  • The AWS Backup console
  • The AWS Command Line Interface (CLI)
  • The AWS SDKs

In your backup plan, specify a logically air-gapped vault as the primary target or as a copy destination, and your FSx for NetApp ONTAP backups will go there.

Here is how sharing works:

  • You can share the vault with other accounts through AWS Resource Access Manager (RAM) for recovery or restore testing
  • Vault access during an account compromise can be safeguarded with Multi-party approval
  • Once sharing is in place, you can start direct restore jobs from that account, which saves you the step of copying backups first

The feature is available in AWS Regions where both logically air-gapped vaults and Amazon FSx for NetApp ONTAP are available. Check the AWS Backup documentation and pricing page for Region details and costs!

Wrap-up

  • AWS Backup logically air-gapped vaults now support Amazon FSx for NetApp ONTAP
  • Backups are immutable and locked by default, encrypted with AWS owned keys or customer-managed keys
  • Store them in the same account, other accounts, or other Regions
  • Share via RAM, and protect access during account compromise with Multi-party approval
  • Direct restore from the shared account cuts down recovery effort

This one is for the operations folks who really want to protect their ONTAP data!

Related posts