❗ Important
To enable this feature, you will need to update your AWS Access Role by deploying the latest CloudFormation template for each account in which you intend to provision Druva Cloud. For more information, see Update Existing AWS Access Roles in Druva CloudRanger.
Onboard AWS account via CFT
You can manage the connectivity between Druva and your AWS Account via a CloudFormation template (CFT). You can add and update accounts in AWS Workloads (CloudRanger) Management Console via this process.
If you are a new customer
Log in to Druva Cloud Platform (DCP) console and navigate to the Organization in which you wish to add a new account(s).
📝 Note
You can create an organization in DCP. When a new organization is created from DCP, it is mapped to AWS Workloads Management Console and is visible.
Add a new account (onboarding) and link it to AWS Workloads Management Console via an AWS access role. The CloudFormation stack allows you to provision the S3 access role for your AWS environment.
For more information, see Create an AWS Access Role.
If you already have an existing account
Update your CloudFormation template to implement new features that require additional access permissions to your AWS account. In this case, a new role for S3 will be created. You can then access the account S3 buckets and perform backup and restore.
For more information on how to update the CloudFormation template, see Update Existing AWS Access Roles for AWS Workloads.
The overall workflow on Druva Cloud is illustrated below. Refer the below steps for additional information.
Step 1: Provisioning storage on Druva Cloud
To get started, you will first need to provision storage on Druva Cloud. Once you initiate a storage request, this triggers a Support ticket to provision the storage on Druva Cloud based on your agreed credit limits.
📝 Note
If you do not have a setup to use your SSO credentials via Druva Cloud Platform, you will first need to get your DCP account configured. On initiating the cloud storage request, Druva Support will configure the required credentials for your Druva Cloud Platform account. You may receive an email communication detailing the steps to set up and activate your DCP account.
If you have logged in to AWS Workloads Management Console via DCP or have an Enterprise Workloads account, all your existing Druva storage is displayed on the Storage page. For more information, see Provision Storage on Druva Cloud.
Step 2: Configure storage rules
Storage Rules help create a mapping between Druva Cloud and your AWS resources within specific Regions and Accounts. Once you identify the AWS resources to be backed up to Druva Cloud, the Storage Rules direct the data backups to the appropriate Druva Cloud Region provisioned within your chosen Account.
📝 Note
You will need to configure Storage Rules to get started with backing up snapshots to Druva Cloud. A backup policy defined to move snapshots to Druva Cloud will be executed only when a corresponding Storage Rule is available.
Storage Rules are integral to your Druva Cloud data protection workflow. For more information, see Configure Storage Rules.
Step 3: Encryption
Secure your data backups by encrypting them with a unique E-Key. For more information, see Manage Encryption.
Step 4: Create backup policy for AWS S3 bucket airgap backup
For more information, see Create backup policies for AWS S3 buckets.
Step 5: Manage your data protection workflow
With backup policies in place, your data protection schedule is automated based on your retention settings. You may still initiate backups to Druva Cloud on-demand or choose to restore snapshots. For more information, see Back up AWS S3 buckets and Restore an AWS S3 bucket.