> Software > Auto Recovery > Virtual Machines > Planning > Hypervisor Configuration Requirements > Amazon Web Services

Replication Target Options for Amazon

When you configure a replication target for Amazon, provide Amazon-specific values for the destination site.

Important

Changes that you make to a replication target apply only to new replication groups that use that target. The changes do not apply to existing replication groups.

General Options

  • Name: Enter a descriptive name for the destination site (for example, DR site 1).

  • Destination: Select a hypervisor for the destination instances.

  • Access node: Select an access node or an access node group to perform operations for the replication target.

    For AWS to AWS restores, if you assigned an access node at the hypervisor and VM group levels, both the access nodes are used. For AWS restores, if you assigned an access node at the hypervisor level and the VM group level for both the source and the destination hypervisors, the access nodes assigned for the destination hypervisor are used.

    To restore multiple instances or VMs simultaneously, select Automatic to distribute the workload (instances or VMs) in the auto recovery job across the access nodes that are assigned for the destination hypervisor. This option is available for operations both from streaming backups or IntelliSnap backup copies.

    The instances are assigned to the access nodes by a region match. Please refer to the available transport modes and select access nodes accordingly. The following modes are available:

    If you select an access node group to restore VMs, the Commvault software distributes the workload (instances or VMs) in the restore job across the access nodes (also called proxies) that are available in the access node group.

  • Security: Select users or user groups who can access the replication target.

  • VM display name: Select Prefix or Suffix, and then enter a string that will be appended to source instances to create the display name for each destination instance.

Destination options

  • Availability zone: Select the destination zone.

  • Instance type: To specify a specific instance type, clear this selection and from the Instance type list, select an instance type that provides the available CPU cores and memory for the instance.

  • Key pair: Select a key pair. For Windows instances, if the administrator password has been set, use that password. You cannot use a new key pair to retrieve the password.

  • Iam role for Amazon EC2: Select the IAM role for destination instance.

Network settings

  • Network: Select a network interface for the destination instances.

  • Security groups: To specify a specific security group, clear this selection and, from the Security groups list, select a security group for the destination instances.

    If you select an existing network, the security group will be automatically selected and not enabled.

  • Volume type: To select a volume type for the provisioning target, clear this option, and then select a volume type that is optimized for transactional workloads or streaming workloads, for the instance.

    The auto volume type used for restore to AWS is General Purpose SSD (gp2), and for restores from AWS to AWS, the volume type of the source instance is used.

    The following volume types are available:

    • General Purpose SSD (gp2)

    • General Purpose SSD (gp3)

    • Provisioned IOPS SSD (io1)

    • Provisioned IOPS SSD (io2)

    • Throughput Optimized HDD (st1)

    • Cold HDD (sc1)

    • Magnetic (standard)

  • KMS key: Select an encryption key or option:

    Important

    • Commvault recommends that you enable default encryption of EBS volumes in each AWS account that creates EBS volumes. For information, see Enable encryption by default in the AWS documentation.

      • The following key types are supported:

      • AWS managed keys

      • AWS owned keys

      • Customer managed keys, including multi-region keys

    • Auto: This option is available for restores to a different AWS Region.

      If the identity that performs the restore has the ec2:GetEbsDefaultKmsKeyId action, then the default KMS key for EBS encryption will have "Default EBS Key" tag. The ec2:GetEbsDefaultKmsKeyId action is included in amazon_restricted_role_permissions.json.

    • No encryption: This option is not recommended. The AWS Well-Architected Framework (SEC08-BP02) recommends enforcing encryption at rest for sensitive data.

Advanced options

  • Tenancy: To restore the instance as an Amazon EC2 Dedicated Instance or Dedicated Host, select any of the following:

    • Shared - run a shared hardware instance

    • Dedicated - run a dedicated instance

    • Dedicated host - launch this instance on a dedicated host: For this option, from Target host by, select either Host ID or Host resource group. Based on the selected target host, the following options may appear:

      • Tenancy host ID

      • Tenancy host resource group

      • Tenancy affinity: select either Host or Off

      • License configurations: Select the licenses associated to the host resource group

    For information, see Amazon EC2 Dedicated Instances in the AWS documentation.

    Important

    When restoring an instance from one host resource group to another, if the source AMI is still available, the system attempts to use that AMI and the restore operation fails. In such cases, the AMI ID must be provided. Use sAmazonAMIListForRestore to provide AMIs to be used during restore.

Test Failover Options

  • Expiration time: To enable a destination to be used for test failover operations, select Hours or Days and then specify the amount of time that VMs can run before they expire.

  • Network: A network for the test failover is selected by default. To specify another network, click Browse.

  • Security groups: Select the users and/or the user groups that should have access to the replication target.

  • Instance type: To use a specific instance type, clear this selection and then, from the Instance type list, select an instance type that provides the available CPU cores and memory for the test failover instance.

×

Loading...