FenixDFA AWS Backup Integration Guide

Overview

This document describes the integration process between FenixDFA and AWS Backup, detailing the required configuration steps and data needed for successful integration.

Prerequisites

• Access to the AWS Management Console
• AWS IAM user or role with appropriate permissions for AWS Backup
• Active AWS account and region with AWS Backup configured

Configuration Process

1. Create an IAM User or Role

1. Navigate to the IAM section in the AWS Management Console.
2. For IAM User:
   • Select Users and click Add Users.
   • Provide a username and select Programmatic Access.
   • Attach the necessary permissions (e.g., AWSBackupReadOnlyAccess) or create a custom policy.
   • Complete the setup and download the Access Key ID and Secret Access Key.
3. For IAM Role:
   • Select Roles and click Create Role.
   • Choose a trusted entity (e.g., an EC2 instance or Lambda function).
   • Attach the necessary permissions (e.g., AWSBackupReadOnlyAccess) or create a custom policy.
   • Save the role’s ARN for future use.

2. Configure Permissions

If using a custom policy, ensure it includes at least the following permissions:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "backup:ListBackupVaults",
        "backup:ListRecoveryPointsByBackupVault",
        "backup:GetRecoveryPointRestoreMetadata",
        "backup:DescribeRecoveryPoint"
      ],
      "Resource": "*"
    }
  ]
}