This topic describes backup vaults and the operations that you can perform on backup vaults.

Background information

A backup vault is a cloud repository that is used by Hybrid Backup Recovery (HBR) to store backup data. On the Storage Vaults page of the HBR console, you can view the following information about each backup vault: the number of backup vaults, amount of backup data, status, and number of backup plans. You can also perform the following operations on a backup vault: view the backup content, configure a tag for a backup vault, back up data across multiple regions, configure backup parameters, specify an expiration date for a backup vault, and delete a backup vault.

Procedure

  1. Log on to the HBR console.
  2. In the top navigation bar, select a region.
  3. In the left-side navigation pane, choose Backup Appliance > Storage Vaults.
    On the Storage Vaults page of the HBR console, all backup vaults are displayed. You can view the following information about each backup vault: the type, number of backup plans, amount of backup data, creation time, and status. You can also perform the following operations on a backup vault: vaults

Configure a tag for a backup vault

You can use tags to identify resources. You can also use tags to categorize HBR resources. This way, you can search and aggregate resources in an efficient manner.

You can create different tags for different backup vaults. For example, if you manage teams or projects, you can create tags based on departments or projects, and then use these tags to group your resources. For example, you can create a tag named project:a for a project. This way, you can filter out a group of backup vaults based on the tag when you manage backup vaults.

  • Description
    • Each tag consists of a key-value pair.
    • A tag must be unique.

      For example, the company:a tag is added to a backup vault. If you add the company:b tag to the backup vault, the company:a tag is replaced by the company:b tag.

    • Tags are not shared across regions. For example, tags that are created in the China (Hangzhou) region are invisible to the China (Shanghai) region.
  • Precautions
    Item Limit
    The maximum length of a key 128 characters
    The maximum length of a value 128 characters
    The maximum number of custom tags that you can add to a resource 20
    The key of a tag
    • The key cannot start with aliyun or acs:.
    • The key cannot contain http:// or https://.
    • The key cannot be an empty string.
    The value of a tag A tag value cannot contain http:// or https://.
  1. In the Tags column next to the name or the ID of the backup vault that you want to manage, click the tags icon.
  2. In the dialog box that appears, click Edit.
  3. In the Key and Value fields, enter the key-value pair of a tag and click Save.
    If you want to create more than one tags, click Add a row to specify the key-value pair of a new tag.

Create an image repository for a backup vault

To meet the requirements for disaster recovery, you can create a remote image repository for a backup vault. Data in the backup vault is automatically replicated to the image repository. This way, you can back up data across multiple regions. For more information, see Use a mirror vault to back up data across regions.
Notice A backup vault whose backup type is Archive does not support the remote backup feature.

Search backup vaults by tag

In the upper-right corner of the Storage Vaults page, select Tags from the drop-down list and enter a tag name. Then, click the Search icon.
  • You can search for a resource by using a key, as shown in the following example:
    aaa
  • You can search for a resource by using a key-value pair, as shown in the following example:
    aaa:bbb
  • You can search for a resource by using multiple key-value pairs, as shown in the following example:
    aaa:bbb,ccc:ddd
search

What to do next

Action Description
Modify Backup Vault In the Actions column of the backup vault that you want to manage, choose More > Modify Backup Vault. Then, configure the Vault Name, Backup Search, and Immutable Backup parameters.
Notice
  • Only backup vaults whose backup type is General Backup support the backup search and immutable backup features. After the features are enabled, you cannot disable the features.
  • After the immutable backup feature is enabled, you cannot modify or delete backup vaults or backup files in the backup vaults during the specified retention period.
  • After the immutable backup feature is enabled, you can continue to run backup or restore jobs.
Alert Settings In the Actions column of the backup vault that you want to manage, choose More > Alert Settings. Then, configure an alert for the backup vault. By default, if a backup attempt fails or a backup client is disconnected from HBR, alert notifications are sent to the owner of an Alibaba Cloud account. The following notification methods are supported:
  • Disabled: HBR does not send alert notifications.
  • To Parent Account: HBR sends email alert notifications to the owner of the Alibaba Cloud account to which the backup vault belongs.
  • Custom: If you select this option, you must specify one or more alert contacts or alert groups. After you complete the configuration, HBR sends alert notifications to the contacts and contact groups that you select.
Set Retention Time In the Actions column of the backup vault that you want to manage, choose More > Set Retention Time. You can retain a backup vault for a specified retention period or for persistent storage.
Notice Only backup vaults whose backup type is Database Backup or Archive support this operation. If you specify a retention period for a backup vault, the backup vault is deleted when the retention period expires.
Delete In the Actions column of the backup vault that you want to manage, choose More > Delete.
Notice After a backup vault is deleted, you cannot restore the backup vault. Proceed with caution.
RAM Permission Policy In the Actions column of the backup vault that you want to manage, choose More > RAM Permission Policy. You can grant permissions to a specified RAM user on a backup vault. These permissions allow the RAM user only to back up or restore the backup vault.

In the Resource Access Management (RAM) console, copy the required policy template, paste the template to create a custom policy, and then attach the custom policy to a RAM user. For more information, see Create a custom policy.

  • Sample policy that disables the restore feature
    {
        "Version": "1",
        "Statement": [
            {
                "Effect": "Deny",
                "Action": [
                    "hbr:CreateRestore",
                    "hbr:CreateRestoreJob",
                    "hbr:CreateHanaRestore",
                    "hbr:CreateUniRestorePlan",
                    "hbr:CreateSqlServerRestore"
                ],
                "Resource": [
                    "acs:hbr:*:1178******531:vault/v-000******blx06",
                    "acs:hbr:*:1178******531:vault/v-000******blx06/client/*"
                ]
            }
        ]
    }
  • Sample policy that disables the backup feature
    {
        "Version": "1",
        "Statement": [
            {
                "Effect": "Deny",
                "Action": [
                    "hbr:CreateUniBackupPlan",
                    "hbr:UpdateUniBackupPlan",
                    "hbr:DeleteUniBackupPlan",
                    "hbr:CreateHanaInstance",
                    "hbr:UpdateHanaInstance",
                    "hbr:DeleteHanaInstance",
                    "hbr:CreateHanaBackupPlan",
                    "hbr:UpdateHanaBackupPlan",
                    "hbr:DeleteHanaBackupPlan",
                    "hbr:CreateClient",
                    "hbr:CreateClients",
                    "hbr:UpdateClient",
                    "hbr:UpdateClientSettings",
                    "hbr:UpdateClientAlertConfig",
                    "hbr:DeleteClient",
                    "hbr:DeleteClients",
                    "hbr:CreateJob",
                    "hbr:UpdateJob",
                    "hbr:CreateBackupPlan",
                    "hbr:UpdateBackupPlan",
                    "hbr:ExecuteBackupPlan",
                    "hbr:DeleteBackupPlan",
                    "hbr:CreateBackupJob",
                    "hbr:CreatePlan",
                    "hbr:UpdatePlan",
                    "hbr:CreateTrialBackupPlan",
                    "hbr:ConvertToPostPaidInstance",
                    "hbr:KeepAfterTrialExpiration"
                ],
                "Resource": [
                    "acs:hbr:*:1178******9531:vault/v-000******blx06",
                    "acs:hbr:*:1178******9531:vault/v-000******blx06/client/*"
                ]
            }
        ]
    }