AWS re:Post을(를) 사용하면 다음에 동의하게 됩니다. AWS re:Post 이용 약관
AWS re:Postre:Post

Correct permissions to Restore an Aurora Backup from AWS Backup with KMS

0

Hello, here is the situation, we have AWS Backup configured to backup Aurora Clusters, the Aurora Cluster is encrypted with a CMK of KMS. Now, that we want to restore a backup using the AWS Backup Console, the process says it finished successfully but the restored Aurora Cluster has 0 instances. So I think there is an issue of permissions to use the KMS key, but I have tried different permissions to no avail. Is there a document that specifies the correct permissions for this to work ?

Thanks in advanced. Kind Regards,

주제
보안, 신원 및 규정 준수스토리지분석데이터베이스
태그
AWS 키 관리 서비스백업 및 복구AWS Backup아마존 Aurora
언어
English
profile picture
Higher
질문됨 2년 전454회 조회
2개 답변
1
수락된 답변

I feel just that in case of Aurora Cluster restored from restore point only restore the Aurora cluster. You need to manually attach the instances with the cluster. Second would be if you can see the KMS used for encryption of source Aurora has permission's granted to the account you are trying to perform the restore.

AWS
SSaxena
답변함 10달 전
profile picture
전문가
Giovanni Lauria
검토됨 한 달 전
  • Higher
    10달 전

    I will make some tests and update. I think the restore from AWS Backup should create at least one instance, doesn't make sense to restore to cluster with 0 instances, in that case as I do now, I prefer to restore from Snapshot from the RDS Consosole.

  • Higher
    8달 전

    Update: exactly as @SSaxena said, the Aurora Cluster is created without Instance, you havce to manually add a new Instance, I think I will stick to the restore from the RDS Console for now

0

You can look at CloudTrail event history around the time when you run the restore to see if any CreateDBInstance call is failing/giving an error. The error code would tell the missing permission.

Please also look at any other API calls around that timestamp to note any additional API calls which gave an error.

AWS
Shivam_G
답변함 2년 전
profile picture
전문가
Giovanni Lauria
검토됨 한 달 전
  • Higher
    2년 전

    Hello Shivam, I did and I got no errors, I see the following actions: StartRestoreJob, RestoreDBClusterFromSnapshot, CreateGrant, RestoreStarted

    I could not find any error in CloudTrail, the Bakcup Restore Job shows as Completed, the RDS Cluster is there with status of Available but with 0 instances.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠