Title

AWS re:Invent 2023 - Protect critical data with ease using Amazon EBS snapshots (STG205)

Summary

• EBS Snapshots Overview: Amazon EBS snapshots are point-in-time backups of EBS volumes, incremental, crash-consistent, and can be shared across accounts and regions.
• Use Cases: EBS snapshots are used for backup and disaster recovery, refresh/scale-up/data handoff workflows, non-EBS-based backup and migration, and integration with third-party solutions.
• Incrementality and Billing: Snapshots are billed only for the changed blocks since the last snapshot, reducing costs and snapshot creation time.
• Security Features: EBS offers encryption with AWS KMS, encryption by default (EBD), and the ability to enforce 100% encryption across resources. Block Public Access settings prevent unauthorized sharing, and Snapshot Lock protects against accidental or malicious deletions.
• Recycle Bin: A soft delete feature for snapshots and AMIs, with rule lock to prevent rule alterations.
• Application Consistent Snapshots: Using Data Lifecycle Manager (DLM) and AWS Systems Manager, users can automate the creation of application-consistent snapshots for databases and applications that require all data to be captured at the time of the snapshot.
• DLM Default Policies: These policies provide automated backup protection and work in conjunction with other backup mechanisms, ensuring that critical data is always backed up.
• EBS Snapshots Archive: A lower-cost storage tier for long-term retention of snapshots, suitable for snapshots with a retention period greater than 90 days or with a change rate greater than 25%.

Insights

• EBS Snapshots as a Critical Backup Tool: The session emphasizes the importance of EBS snapshots in creating secure, compliant, and auditable data estates, highlighting their role in disaster recovery and data protection.
• Security and Compliance: AWS has introduced several features to enhance the security and compliance of EBS snapshots, such as encryption, block public access, and snapshot lock. These features are critical for organizations that must adhere to strict regulatory requirements.
• Cost Optimization: The incremental nature of EBS snapshots and the introduction of EBS Snapshots Archive tier demonstrate AWS's commitment to helping customers optimize costs while maintaining data protection.
• Automation and Integration: The integration of DLM with AWS Systems Manager for application-consistent snapshots and the introduction of default policies for automated backup protection show AWS's focus on simplifying operations and ensuring data integrity without manual intervention.
• Customer-Centric Enhancements: AWS's continuous improvement of EBS snapshots, such as the Recycle Bin feature and the console updates for better visibility of backup status, indicates a strong customer-centric approach to feature development.