Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Web UI Cloud Administrator's Guide
  3. Protecting PaaS assets
  4. Prerequisites for protecting Amazon RDS SQL Server database assets
NetBackup™ Web UI Cloud Administrator's Guide

Prerequisites for protecting Amazon RDS SQL Server database assets

You need to enable the native backup and restore options for the option group to protect RDS SQL assets.

This option group must be a part of the IAM role, which has an AWSBackupServiceRolePolicyForRestores/Backup policy attached to it.

To create an option group:

  1. On your AWS portal, go to IAM and create a new role.
  2. Attach the following permissions:
    • AWSBackupServiceRolePolicyForRestores

    • AWSBackupServiceRolePolicyForBackup

    • sqlNativeBackup

  3. Go to RDS > Option groups. Do the following:

    Note:

    Refer to the AWS documentation for the latest steps on adding the native backup and restore option to the option group for RDS SQL Server.

    • Create a group (Name: SqlServerBackupRestore, Description: xxx, Engine: Select your database engine, Major Engine Version: Select the version of your DB instance).

    • Click Create.

    • Click the created group to edit. Do the following:

      • Click Add option.

      • Select the option: SQLSERVER_BACKUP_RESTORE.

      • Select the IAM role you created in the previous steps.

      • Select Immediately, to schedule an instant change.

  4. Go to RDS > Databases and select your instance. Do the following:
    • Click Modify.

    • Select the option group you created in the previous step.

    • Click Next.

    • Select Apply immediately, to avoid service downtime.

    • Click Modify DB instance to apply the changes.

    • If you have a connection to database from the SQL Management Studio, close and connect again.

To use the bucket for protecting Amazon RDS SQL Server database assets:

For NetBackup versions before 10.2:

  1. Create the NetBackup AWS S3 bucket as: netbackup-<AWS_ACCOUNT_IDENTIFIER>
  2. If a bucket already exists with the same convention, NetBackup uses it.

For NetBackup versions 10.2 onwards:

  • The bucket is automatically created, if it is not present, following the convention:netbackup-<AWS_ACCOUNT_IDENTIFIER>-region

Feedback

Was this page helpful?
Previous

Enabling backup and restore in Kubernetes

Next

Protecting RDS Custom instances

Feedback

Was this page helpful?