AWS BackUp - Organisation and Resource Selection

Question

I am struggling getting my head around AWS BackUp in particular for controlling the backups from the management account.

My use case is quite simple I would have thought

(1) Two accounts in the AWS Organisation, one defined as the management account
(2) I want to back up ALL ec2 instances in both accounts across ALL regions with some ec2 instances with the tag "no-backup" being excluded.

I am following along https://repost.aws/knowledge-center/backup-organization-backups

However, when I am getting to the Create BackUp Policy it seems the only way to do resource selection is by tag allocation? Even though for BackUp Plans you can specify all ec2 resources and a exclude tag.

Is this correct?

Didier_Durand · Answer

Hi,

I'd strongly recommend you to read this WP (one of the best by AWS from my standpoint): https://docs.aws.amazon.com/pdfs/whitepapers/latest/organizing-your-aws-environment/organizing-your-aws-environment.pdf

I suggest to read all what's related to Backup account in this document: it's close to what you want to achieve.

On your specific question, this page details fully how resource assignment is achieved: https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html

Best,

Didier

Praveen Muppala · Answer

To manage resource backups effectively in AWS, using tags such as Backup: True and Backup: False can be very useful. This approach allows you to selectively include or exclude resources based on their tags. Here’s a summary of how to implement this using AWS Backup policies, referencing the provided AWS documentation: - https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html

AWS BackUp - Organisation and Resource Selection

Relevant content