S3 backups

Once the seed backup is complete, all subsequent backups are incremental and are generated based on the policy’s configured schedule. The seed backup may take a while to complete if the number and size of the objects is large. You can opt to enable a backup window and specify a start and end time, and a time zone, to generate a backup. Backups will only be performed within the specified window.

Partial Backups

A partial backup occurs when some objects in a Protection Group are not backed up. Protection groups may contain many buckets or objects from different buckets and sometimes it may be the case that not all of these objects are backed up. If a partial backup occurs, an alert is generated which can be viewed on the Alerts page. The backup is also marked as a Partial SecureVault Backup and it provides information about the objects that were not backed up. You can preview the list of objects or put the entire list of objects in your bucket. A likely cause of failure to back up some objects is inadequate permissions for Clumio to backup the object. You can use the CSV file to review the permissions on the failed objects and verify the permissions.

You can also see if your protection groups have been completely backed up or only partially backed up from the calendar view. The calendar view displays when you click the name of a protection group from the table on the S3 tab. A complete backup is indicated by a blue dot on the calendar and a partial backup is indicated by the half blue dot on the calendar.

S3 Continuous Backup

Clumio offers a continuous backup option for S3 buckets. Once continuous backup is enabled, your protected S3 buckets are synchronized at regular intervals if any updates have taken place. Clumio checks every 15 minutes to see if the number of object updates exceeds 32, if there are no updates or the number is below 32, Clumio waits for the next 15 minute interval until either the number of updates exceeds 32 or it has been one hour since the last time it synchronized with the status of the S3 buckets.

Continuous backup can be enabled for any bucket including unprotected buckets (i.e. buckets that are not part of a protection group). However, if you enable continuous backup for unprotected buckets, a backup is not taken unless the bucket is assigned to a protection group with a valid S3 protection policy and the initial seeding backup is finished.

Enable Continuous Backup

  1. Navigate to AWS > Accounts [Account Number] > Protect > S3 and click the Buckets tab.
  2. Select the buckets for which you want to enable continuous backup from the Active S3 buckets table and click Enable on the Continuous backup drop down menu.
  3. The Continuous backup column in the table will indicate that the feature has been enabled for the selected buckets.

If the selected buckets are not assigned to a protection group with a valid S3 policy, continuous backups will not be taken. If you have not yet added the selected buckets to a protection group you can do so now by clicking the Protection groups tab and clicking Create protection group.

Disable Continuous Backup

  1. Navigate to AWS > Environments > [Account Number] > S3 and click the Buckets tab.
  2. Select the buckets for which you want to disable continuous backup from the Active S3 buckets table and click Disable on the Continuous Backup drop down.
  3. The Continuous Backup column in the table will indicate that the feature has been disabled for the selected buckets.

Protect AWS S3 Assets

To set up protection for your Amazon S3 buckets, you must first connect to the AWS environment through Clumio see AWS environment connection.
For existing CloudFormation connections: If you have existing AWS environments connected to Clumio, which contain S3 buckets you want to protect, you must first update the CloudFormation Template for those environments. Navigate to AWS > Environments, click Not Fully Enabled and select the S3 check box in the Protection section of the CloudFormation Template.
Clumio uses protection groups to protect S3 assets. You must create a protection group that contains the S3 assets you want to protect and then apply a policy to that protection group.