Manage backup vaults - Cloud Backup - Alibaba Cloud Documentation Center

A storage vault is a cloud repository that Cloud Backup uses to store backup and archive data. Storage vaults include backup vaults and archive vaults. On the Storage Vaults page of the Cloud Backup console, you can view details about all storage vaults, including the vault name, ID, vault type, number of backup plans, amount of source data, amount of data in the vault, and status. You can also set tags, configure cross-region backup, and modify basic information and permissions for storage vaults.

Procedure

Log on to the Cloud Backup console.
In the top navigation bar, select a region.
In the navigation pane on the left, click Storage Vaults.
The Storage Vaults page displays all backup vaults and archive vaults in Cloud Backup. View details about all storage vaults, including the vault name, ID, vault type, number of backup plans, amount of source data, amount of data in the vault, and status. For more information about storage vault types, see Storage vault types.

Set tags for a storage vault

Tags help you classify and manage storage vaults. You or your organization can use tags to mark storage vaults that share the same purpose, owner, or business attribute. This facilitates subsequent searches and batch operations.

Set different tags for different storage vaults. For example, in team or project management scenarios, set tags based on dimensions such as projects or departments, such as project:a, to group and categorize storage vaults. By filtering with tags, you can quickly search for and perform operations on a group of storage vaults to improve management efficiency.

Usage notes

Each tag consists of a key-value pair.
A tag must be unique.
For example, the company:a tag has been added to a backup vault. If you add the company:b tag to the backup vault, the company:a tag is replaced by the company:b tag.
Tags are not shared across regions. For example, tags that are created in the China (Hangzhou) region are invisible to the China (Shanghai) region.

Limits

Item	Limit
The maximum length of a key	128 characters
The maximum length of a value	128 characters
The maximum number of custom tags that can be added to a resource	20
The key of a tag	The key cannot start with `aliyun` or `acs:`. The key cannot contain `http://` or `https://`. The key cannot be an empty string.
The value of a tag	A tag value cannot contain `http://` or `https://`.

In the Tag column of the target storage vault, click the icon.
In the dialog box that appears, click Edit.
In the Key and Value fields, enter the key-value pair of a tag and click Save.
If you want to create more than one tag, click Add a Row to specify the key-value pair of a new tag.

Search for storage vaults by tag

On the Storage Vaults page, set the search filter to Tags, enter the tag information, and then click the icon to search.

You can search for a resource by using a key, as shown in the following example:
```
aaa
```
You can search for a resource by using a key-value pair, as shown in the following example:
```
aaa:bbb
```
You can search for a resource by using multiple key-value pairs, as shown in the following example:
```
aaa:bbb,ccc:ddd
```

Cross-region backup

For disaster recovery, you can create a remote mirror backup vault for a backup vault. Data in the backup vault is automatically replicated to the mirror vault to enable cross-region backup. For more information, see Cross-region backup.

Important

Cross-region backup is not supported for archive vaults.

Enable backup search and immutable backup for a backup vault

In the Actions column of the backup vault, choose ⋮ > Modify Backup Vault. In the dialog box that appears, set the vault name and enable or disable backup search and immutable backup.

Important

The backup search and immutable backup are available only for backup vaults whose Storage Vault Type is General Backup. After these features are enabled, you cannot disable them.
After immutable backup is enabled, you cannot modify or delete the backup vault or the backups in the vault during the retention period. For more information, see Immutable backup.
After immutable backup is enabled, normal backup and restore operations are not affected.

Enable archive lock for an archive vault

In the Actions column of the archive vault, choose ⋮ > Configure Archive Vault. In the dialog box that appears, set the vault name and enable or disable the archive lock.

Important

Archive lock is available only for archive vaults whose Storage Vault Type is Archive. After the feature is enabled, you cannot disable it.
After archive lock is enabled, you cannot modify or delete the archive vault or any archived data in the vault during the retention period. For more information, see Immutable backup.
After archive lock is enabled, normal data archiving operations are not affected.

Configure alert settings for a storage vault

In the Actions column of the storage vault, choose ⋮ > Alert Settings to configure alerts for the vault. By default, if a backup fails or a client is disconnected from the server, an alert notification is sent to the Alibaba Cloud account. The following methods are supported:

Disabled: No alert notifications are sent.
Notify Alibaba Cloud Account: Alert notifications for the storage vault are sent by email to the Alibaba Cloud account by default.
Custom: Select one or more contacts or contact groups. After the configuration is complete, alert notifications for the storage vault are sent to the selected contacts or contact groups.

Set the retention period for a database backup vault

Important

This operation is available only when the Storage Vault Type is Database Backup. After the specified retention period expires, the backup data is automatically deleted.
You can set the retention period for an archive vault only when you create an archive plan. The retention period cannot be modified later.

In the Actions column of the database backup vault, choose ⋮ > Set Retention Period to set the retention period for the vault. Retain backup data for a specified period or permanently.

If you set the retention period to 0, backup data is permanently retained.
After you change the retention period, the new retention period applies to historical backups. The change may take up to 24 hours to take effect.
Incremental, cumulative incremental, and log backups depend on a complete preceding backup chain. The entire backup chain, which includes full, incremental, cumulative incremental, and log backups, is retained in the database backup vault and occupies storage space until the last backup in the chain expires.

Delete a storage vault

Warning

If you delete a storage vault, all backup and archive data in the vault is deleted and cannot be recovered. Proceed with caution.

In the Actions column of the storage vault, choose ⋮ > Delete. Confirm the deletion in the dialog box that appears.

Configure permissions for a storage vault

Configure permissions for a backup vault

In the Actions column of the backup vault, choose ⋮ > Modify Backup Vault.
You can grant permissions to a specific RAM user to allow the user to perform only backup and restore operations using this backup vault.
Click the icon in the Cloud Backup console to copy the required access policy template. Then, go to the RAM console to create a custom policy and attach the policy to the target RAM user. For more information, see Create custom policies.

Configure permissions for an archive vault

In the Actions column of the archive vault, choose ⋮ > Configure Archive Vault.
Grant permissions to a specific RAM user to allow the user to perform only data archiving and retrieval operations using this archive vault.
Click the icon in the Cloud Backup console to copy the required access policy template. Then, go to the RAM console to create a custom policy and attach the policy to the target RAM user. For more information, see Create custom policies.