AWS Backup¶

We use Perforce and Redmine running on an AWS Server. Our backup strategy is to simply create an Amazon Machine Image (AMI) of the current server state. This AMI can then be used to launch a new server instance which will look just like the original, preserving all Perforce and Redmine data.

Step 1, Create AMI¶

Log into the AWS console, go to the instances tab, select the server instance to back up, right click, select Image->Create Image.

Now name the image, check the "No reboot" box, then select "Create Image"

You should see Create Image request message below.

Step 2, Prepare AMI¶

Go to the AMI tab on the AWS console. You should now see the new AMI. (It actually could take a few minutes to appear).

As part of our backup strategy, we create another server instance of our backup AMI, but we actually run this instance on an entirely different AWS account. The idea here is if the primary AWS account is hacked somehow, and the backup AMI's are deleted, hopefully our "backup" AWS account is not also hacked, and we have a "hot spare" ready to go (Redmine should work right away, but we would need a new Perforce license for the backup server's IP address)

To share this backup AMI with another AWS account, we have to modify the backup AMI's permissions. This step assumes you have already set up a backup AWS account and you have the account id handy. Select the backup AMI, right click, and select "Modify Image Permissions".

You should then see the following window. Enter in the AWS Account Number of the backup AWS account, select "Add Permission", then check the "create volume" box and then select save.

At this point this backup AMI is ready to be grabbed by the backup AWS account. So now log in to the backup AWS Console and go to the instances tab. Below is what my backup AWS server currently looks like. For no particular reason, 2 backup servers are running. Only 1 is really necessary.

Go to the AMIs tab, and change "Owned by me" to "Private Images".

You should now see the back up AMI we created in the primary account (I misnamed it ... it should say "Back Up 10May2018")

Now select the AMI, right click and select Launch:

Choose instance type t2.micro, which it defaults to. Select "Review and Launch".

This will bring up next configuration. Select Edit Security Group and select existing security group and then select "launch wizard-1" ...