Configure snapshot replication
You can choose to replicate snapshots for AWS cloud assets from the primary location to a remote or a secondary location. The CloudPoint servers support cross-region and cross account replication. With snapshot replication you can achieve the following:
Maintain a copy of cloud assets at a different destination for long-term retention and auditing requirements.
Recover cloud assets from the replicated copies from another region in case there is a region outage.
Recover cloud assets from the replicated copies from another account in case the user account is compromised.
Review the following information to configure snapshot replication:
You can configure snapshot replication when you create a protection plan. See the NetBackup™ Web UI Administrator's Guide.
For cross account replication, you need to establish a trust relationship between the source and the target account. For more details, refer to the Across AWS Accounts Using IAM Roles related information in the Amazon Web Services documentation.
Consider the following when you configure cloud snapshot replication:
Even if multiple schedules are configured, the replication destination region that is configured is applied to all the schedules.
Cloud snapshot replication is supported only for Amazon cloud providers.
Consider the following before adding cloud assets to a protection plan that is configured for cloud snapshot replication:
Assets must be added to a protection plan that replicates snapshots to a different region.
For example, assets residing in region 'aws_account_1-us-east-1' cannot be subscribed to a protection plan replicating to the same region 'aws_account_1-us-east-1'.
Assets can be replicated to a different account in the same region.
For example, assets residing in region 'aws_account_1-us-east-1' can be subscribed to a protection plan replicating to the same region but different account 'aws_account_2-us-east-1'.
Assets that are discovered by a CloudPoint server must be replicated to the region that is discovered by the same CloudPoint server.
For example, assets that are discovered by CloudPoint server 'CP1' cannot be subscribed to a protection plan replicating to a region that is discovered by CloudPoint server 'CP2'.
Only Amazon assets can be subscribed to a protection plan that is configured for cloud snapshot replication.
For better performance, you can tune the number of concurrent snapshot replications. Amazon has different limits for each asset type to do concurrent snapshot replications to a single destination region. For example, RDS has a limit for 5, EBS has a limit for 5, and EC2 has a limit for 50. For more details refer to Copy Snapshot related information in the Amazon Web Services documentation.
In NetBackup this limit is defined using the following parameter in the bp.conf file:
MAX_CLOUD_SNAPSHOT_REPLICATION_JOBS_PER_DESTINATION
The default value is 5.