Incomplete demo!! A lot of missing information like the cross account role used in the source account, enabling the cross-account feature in the management account etc.
Exactly, it was hard to follow. It seems backup of EC2 and EFS was taken yet this was not shown at the begining stage, also tags were not show. Low level demo as for Storage Specialist.
The key you have selected in the destination account (3:30) is different from the one you've selected in the source account (4:55). How is this a shared key?
Please help me So i'm use aws backup service and then After I restore my EC2, and my data is gone. then how to restore my data? I want my data back on a freshly restored instance
Yes that was the most important part. The Role and access policy for cross account asume role with proper access to KMS is very important. And in AWS security (permissions, policies etc) are most sensitive and complex. And they skiped that part.
Why the hell didn't AWS build a test backup / job copy button?! I've been trying to get this working for longer than I care to admit. Backup across accounts is very difficult and error prone with lots of caveats with encryption and keys, etc. And, you run it each night with one error and at time being told to you so it takes weeks to work through all of the issues because you have to wait until that night to see if your config worked or not. And in this video she does exactly that. There doesn't seem to be a way to simply test the backup. Really the problem comes down to the copy job. Backup is easy to get working. Getting the copy job to copy a backup to the other account is where all of the problems occur. Why can't I just ask to manually run the copy job?!?!?! AWS is just so frustrating to operate.
Sorry for the frustration, Charlie. We've shared your feedback internally with our Backup team for review. I did find this doc for copying backups you may find helpful: go.aws/4cMjnG8. This doc has additional troubleshooting steps as well: go.aws/4cQb63M. 📜 ^MO
The presenter has failed to document how key sharing with KMS works and how she managed to populate the source account with the destination account's key. Even worse is that AWS Documentation has nothing mentioned about this.
Sorry for any frustration, Peter! I've made sure to pass along your feedback to our TH-cam team. If you'd like to provide feedback on our documentation, you can click on the Feedback button in the upper right corner of the doc, or check out other options, here: go.aws/feedback. ^RM
Hello, Robert! 👋 We've got multiple resources you can use, such as blogs, documentation, free training etc. You'll find everything you need here: go.aws/3GLTg39. 📚 You can also check out our FAQ section for more info: go.aws/3XirvpR. ✅ ^AR
@@awssupport I haven't found the documentation for sharing the KMS for AWS Backup Vault. I can't even find any youtube resource about it, very frustrating :/
@@luisdasilva5070 In the end I gave up trying to share KMS keys for AWS backup. Everything else works for sharing keys with other accounts except AWS Backup. The solution for me was to create multi regional customer managed keys in each account then use the keys for the backup vaults. Once you share the backup vaults with your organisation and create the backup plan then AWS handles the encryption conversion automatically.
Incomplete demo. How to establish trust between account and share the keys are not mentioned. Can anybody help on this?
Incomplete demo!! A lot of missing information like the cross account role used in the source account, enabling the cross-account feature in the management account etc.
Exactly, it was hard to follow. It seems backup of EC2 and EFS was taken yet this was not shown at the begining stage, also tags were not show. Low level demo as for Storage Specialist.
The key you have selected in the destination account (3:30) is different from the one you've selected in the source account (4:55). How is this a shared key?
Please help me
So i'm use aws backup service and then
After I restore my EC2, and my data is gone. then how to restore my data? I want my data back on a freshly restored instance
Excellent tutorial.
Thanks for the feedback! ☁️ 💻 🤝
Is AWS backup going to be supported by delegated admin via organizations at some point in the future?
The video implies you need a shared KMS key between accounts. Is that correct anyone?
Yes that was the most important part. The Role and access policy for cross account asume role with proper access to KMS is very important. And in AWS security (permissions, policies etc) are most sensitive and complex. And they skiped that part.
Excellent Tutorial . I have a question shall the cms keys will be same for source & destination ?
Prerequisites: draw the owl.
Awesome video. Well done!
Did you actually manage to get this to work? How did you accomplish the KMS part?
Why the hell didn't AWS build a test backup / job copy button?! I've been trying to get this working for longer than I care to admit. Backup across accounts is very difficult and error prone with lots of caveats with encryption and keys, etc. And, you run it each night with one error and at time being told to you so it takes weeks to work through all of the issues because you have to wait until that night to see if your config worked or not. And in this video she does exactly that. There doesn't seem to be a way to simply test the backup. Really the problem comes down to the copy job. Backup is easy to get working. Getting the copy job to copy a backup to the other account is where all of the problems occur. Why can't I just ask to manually run the copy job?!?!?! AWS is just so frustrating to operate.
Sorry for the frustration, Charlie. We've shared your feedback internally with our Backup team for review. I did find this doc for copying backups you may find helpful: go.aws/4cMjnG8. This doc has additional troubleshooting steps as well: go.aws/4cQb63M. 📜 ^MO
The presenter has failed to document how key sharing with KMS works and how she managed to populate the source account with the destination account's key. Even worse is that AWS Documentation has nothing mentioned about this.
Sorry for any frustration, Peter! I've made sure to pass along your feedback to our TH-cam team. If you'd like to provide feedback on our documentation, you can click on the Feedback button in the upper right corner of the doc, or check out other options, here: go.aws/feedback. ^RM
@@awssupport can you please provide documentation or where to look? I understand the feedback form but it'd be really useful.
Hello, Robert! 👋 We've got multiple resources you can use, such as blogs, documentation, free training etc. You'll find everything you need here: go.aws/3GLTg39. 📚 You can also check out our FAQ section for more info: go.aws/3XirvpR. ✅ ^AR
@@awssupport I haven't found the documentation for sharing the KMS for AWS Backup Vault. I can't even find any youtube resource about it, very frustrating :/
@@luisdasilva5070 In the end I gave up trying to share KMS keys for AWS backup. Everything else works for sharing keys with other accounts except AWS Backup. The solution for me was to create multi regional customer managed keys in each account then use the keys for the backup vaults. Once you share the backup vaults with your organisation and create the backup plan then AWS handles the encryption conversion automatically.
A half baked video with half baked information
Excellent tutorial.