Posted On: Dec 17, 2020
We are excited to announce that customers will now be able to automate copy of EBS snapshots across accounts in different regions, as well as encrypt those copies with a different Customer Master Key (CMK) using Amazon Data Lifecycle Manager. Many customers have Disaster Recovery (DR) compliance needs that require their EBS snapshots to be copied to a separate region and stored with a different encryption key, to protect their data in case of a compromised account. We launched DLM support for copy across regions in December 2019, and now with support for copy across accounts, customers can automate even more actions on created snapshots to meet their DR requirements.
For more information on how to setup policies, including configuration changes required in AWS Key Management Service (KMS) and AWS Identity and Access Management (IAM), please refer to this blog post.
Through 2020, we have expanded DLM to provide customers with more flexibility, adding support for one hour backup intervals, cron expressions and weekly, monthly and annual schedules. Customers can also create policies to automate the creation and retention of Amazon Machine Images (AMIs) from their instances. With today’s launch, customers now have even more control over the lifecycle and protection of their EBS snapshots.
This feature is now generally available in US East (Ohio), US East (N. Virginia), US West (N. California), US West (Oregon), South America (São Paulo), Asia Pacific (Hong Kong), Asia Pacific (Mumbai), Asia Pacific (Osaka-Local), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), Europe (Stockholm), Middle East (Bahrain), AWS GovCloud (US-West) and AWS GovCloud (US-East) with more regions coming soon.
Learn more about Data Lifecycle Manager here.