Getting started with Clumio

Follow these general guidelines to get started deploying Clumio. Each section contains links to documentation in the User Guide that provides details about the processes involved. You may need to log in to Clumio to access some of this content.

Sign up for Clumio

You can sign up for Clumio from the AWS Marketplace or you can register via the Clumio website.

From AWS Marketplace:

  1. Go to Clumio's AWS Marketplace listing.
  2. Click View purchase options on the top right of the page.
  3. Accept the trial offer. Select "public offer" from the Offers drop down menu and click Subscribe. This will give you free access to Clumio for 14 days.
    An overlay displays at the top of the page with a Set up your account button, click to to set up your account.
  4. If your company's trial process requires a vendor review, Clumio's vendor security information is available on Clumio's AWS Marketplace listing page. Scroll down to Vendor Insights to review the security information.

From the Clumio website:

When signing up for Clumio SaaS, you have to register your organization with your primary email address. This email should be an externally reachable email. You can invite multiple users once your organization is registered.Β 

Navigate to the region of your choice. Refer to this article for a list of regions supported by Clumio.

  1. When you click on the region link, you are presented with a login page:

  2. Click Register. You are presented with a registration form.

  3. Type your name, email, and a 14-character password which must have:

    • at least 14 characters

    • at most 64 characters

    • at least 1 uppercase character (A-Z)

    • at least 1 lowercase character (a -z)

    • at least 1 number (0-9)

    • at least 1 special character
      NOTE: No white space characters are allowed.

      Click Next.

  4. On the next page, you are presented with Clumio's Terms and Conditions, review them carefully and click Accept and Register to continue signing up for Clumio.

  5. A message displays informing you that an email has been sent to the work email address you registered with, which contains the next steps.


Note: This email will expire 1 hour after you receive it.


  1. Check your email for the next steps. (check your spam and junk folders as well). The email will contain a link and instructions to confirm your registration.

Confirm your account and you are all set!

Onboarding and deployment

Connect your AWS account using Clumio's CloudFormation or Terraform templates, or set up your AWS account integration manually.

Terraform

Clumio Terraform provider seamlessly integrates in your environment to onboard multiple AWSΒ account / regions. For detailed instructions see Connecting an AWS account using Terraform.

CloudFormation

Clumio also supports onboarding of AWS accounts using CloudFormation. For detailed instructions see Connecting an AWS account using CloudFormation.

Limitations

There are limitations toΒ Clumio operations including, but not limited to, the backup and restore services. For details, seeΒ Clumio Service Limits.

Set up protection

These tasks get you started protecting your assets.

Policies and protection rules

Protection policies

A protection policy at Clumio represents a preconfigured schedule that defines how frequentlyΒ the data from your cloud-based business applications are backed up to SecureVault Backup. AΒ well-defined policy determines where the backup data should be stored, which data sourcesΒ should be protected, how often the data should be backed up, and how long the data should beΒ retained. For example:

  • Gold Policy - Backup:
    • 12hrs - retain for 2 days
    • Daily - retain for 30 days
    • Monthly - retain for 12 months
    • Yearly - retain for 7 years.
  • Silver Policy - Backup:
    • Daily - retain 30 Days
    • Monthly - retain 12 months
  • Bronze - Backup:
    • Weekly - retain for 35 days

For more information, see creating a policy.

Protection rules

Protection rules define the conditions to apply a selected backup policy to your assets. You can use protection rules to automate policy application for your EC2, EBS, RDS, and DynamoDB assets across multiple accounts and regions. Instead of applying policies to multiple tags or to assets per region, you can define a set of conditions such as asset types, accounts, regions, and tags and select a backup policy to apply to that set of conditions. Protection rules can also be prioritized, to be applied in a specified order. For more information, see creating a protection rule.

Tags

To efficiently apply Clumio protection rules, standardize your tag namingΒ convention. Standardizing tags helps Clumio identify resources that need to be protectedΒ across all accounts and regions in your organization. For example, establish a Clumio Tag naming convention that correlates to Clumio Policies:

  • Tag Key: Clumio Β  Β  Β  Β Value: Gold = Gold Policy
  • Tag Key: Clumio Β  Β  Β  Β Value: Silver = Silver Policy
  • Tag Key: Clumio Β  Β  Β  Β Value: Bronze = Bronze Policy

Test backup and restore

If you have onboarded AWS accounts and set policy successfully, you will start seeing resources being backed up with Clumio. When the backup process has started, test backups and restore to ensure service availability and validity.

If you do not see successful backups / restores, or your testing reveals problems, please contact Clumio support.

Backup testing

Test your backup policy by checking for expected backup points in time for the selected resources according to your protection rules and policies. See Clumio backup for details.

Restore testing

When backups are completed and validated successfully, try restoring data. Refer to the help for the relevant datasource restore topic.

Set up security and establish access management

Control user access to Clumio. Enable bring your own key (BYOK) encryption to encrypt your backed up date with your own key instead of the unique CMK created for you by Clumio.

User provisioning

Add users to the platform. IdentifyΒ who needs access to Clumio, then invite them using Access Management Settings.

SSO / MFA

The Clumio platform provides users with the ability to set up Multi-factor Authentication (MFA) or Single Sign On (SSO) to provide an additional layer of security. Any SAML 2.0 compliant Identity Provider can be configured with Clumio. See Authentication for detailed instructions on how to configure an SSO provider or MFA.

BYOK encryption

For additional security and compliance needs, you can encrypt the backup data stored in Clumio using AWS CMKs created and managed in your AWS account (BYOK), giving you the ability to control and monitor access to the stored backup data. See Encryption for more information.

Organizational units

Organizational units (OUs) allow you to create logical buckets of assets within your organization madeΒ up of groupings, such as departments, so that users can access and manage only the assets relevant to their work. Group data sources into OUs to reflect how users are permitted to accessΒ information, for example by AWS accounts. See Organizational Units for detailed instructions.

Roles

Roles provide different levels of access to different types of users within your organization.Β Roles range from a Super Admin who has full access to all operations within the ClumioΒ UI, to a Reporting/Audit Admin who has view-only access to the UI and can generate reports.Β See Roles for more information.

Monitor Clumio functions

After you have successfully finished setting up, start monitoring Clumio to make sure that your assets continue to be backed up as expected.

Reports

Use Clumio reports to monitor Clumio daily. For consistent monitoring, set up the Compliance Report andΒ Activity Report.

Compliance report

The Compliance Report displays the compliance status of an asset in a specified date range.Β An asset can be "In compliance" or "Out of compliance" with the applied protection policy. See Compliance report for more information.

Consumption report

The Consumption Report displays the credit consumption details of all assets backed up by Clumio. You can view your consumption data in credits, dollars (cost per credit), or usage metrics (GB consumed). See Consumption report for information.

Operational tasks report

The Operation Tasks Report displays the SecureVault Backup, Clumio Snap, and restore activities of all assetsΒ protected by Clumio. See Operational tasks report for more information.

Audit report

The Audit Report represents a chronological history of the system activities that users haveΒ performed through the Clumio UI or REST API. Use the Audit Report to find out who made whatΒ changes in the Clumio product, and to ensure that everything is in compliance with your businessΒ requirements. See Audit report for more information.

Activity

Alerts

The Alerts page, available in the Activity widget on the left pane menu, shows you when there are issues affecting the assets in your ClumioΒ environment, for example if a backup or a restore fails. The Activity widget displays a number highlighted in red to indicate the number of alerts raised on your system that require attention. See Alerts for more information.

Tasks

The Tasks page, available in the Activity widget on the left pane menu, displays the status of all of the tasks that are queued, underway, completed, or aborted. The Activity widget displays a number highlighted in blue to indicate the number of tasks currently running on your system. See Tasks for more information.