Every DR strategy depends on copies of data and machine images being in the right place at the right time. AWS gives you service-specific features, such as snapshots and replication, and a central service to manage backups across many services. The exam usually asks you to pick the option that meets a requirement with the least operational effort, so knowing what each tool covers, and what it does not, is the key skill here. AWS Backup centralizes backups across many services, including EBS, EC2, RDS, Aurora, DynamoDB, EFS, FSx, S3 and Storage Gateway. A backup plan defines rules: how often to back up, the backup window, how long to keep recovery points, when to move them to cold storage, and whether to copy them to another Region or account. Resources are assigned to a plan by tags or resource IDs, so tagging a new database backup=daily is enough to protect it. Recovery points are stored in backup vaults, each encrypted with a KMS key and protected by an access policy. AWS Backup Vault Lock can make a vault's retention immutable, protecting backups from deletion even by administrators, which matters for ransomware defense. With AWS Organizations, backup policies apply plans across accounts, and Backup Audit Manager reports on compliance.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.