Description:

Amazon FSx for Windows File Server provides fully managed, highly reliable, and scalable file storage that is accessible over the industry-standard Server Message Block (SMB) protocol. Amazon FSx file storage is accessible from Windows, Linux, and macOS compute instances and devices running on AWS or on-premises. The policy checks if FSx Lustre service has controlled access and its backup schedules are configured.


Remediation:

With Amazon FSx for Lustre, you can take automatic daily backups and manual backups of persistent file systems that are not linked to an Amazon S3 durable data repository. Amazon FSx backups are file-system-consistent, highly durable, and incremental. To ensure high durability, Amazon FSx for Lustre stores backups in Amazon Simple Storage Service (Amazon S3) with 99.999999999% (11 9's) durability.


Creating manual backups

The following procedure guides you through how to create a user-initiated backup in the Amazon FSx console for an existing file system.


  1. To create a manual file system backup
  2. Open the Amazon FSx for Lustre console at https://console.aws.amazon.com/fsx/.
  3. From the console dashboard, choose the name of the file system that you want to back up.
  4. From Actions, choose Create backup.
    In the Create backup dialog box that opens, provide a name for your backup. Backup names can be a maximum of 256 Unicode characters, including letters, white space, numbers, and the special characters . + - = _ : /
  5. Choose Create backup.


You have now created your file system backup. You can find a table of all your backups in the Amazon FSx for Lustre console by choosing Backups in the left side navigation. You can search for the name you gave your backup, and the table filters to only show matching results.


When you create a user-initiated backup as this procedure described, it has the type User-Initiated, and it has the Creating status while Amazon FSx creates the backup. The status changes to Transferring while the backup is transferred to Amazon S3, until it is fully available.


Working with automatic daily backups
Amazon FSx for Lustre can take an automatic daily backup of your file system. These automatic daily backups occur during the daily backup window that was established when you created the file system. At some point during the daily backup window, storage I/O might be suspended briefly while the backup process initializes (typically for less than a few seconds). When you choose your daily backup window, we recommend that you choose a convenient time of the day. This time ideally is outside of the normal operating hours for the applications that use the file system.


Automatic daily backups are kept for a certain period of time, known as a retention period. You can set the retention period to be between 0–90 days. Setting the retention period to 0 (zero) days turns off automatic daily backups. The default retention period for automatic daily backups is 0 days. Automatic daily backups are deleted when the file system is deleted.


Restoring backups
You can use an available backup to create a new file system, effectively restoring a point-in-time snapshot of another file system. You can restore a backup using the console, AWS CLI, or one of the AWS SDKs. Restoring a backup to a new file system takes the same amount of time as creating a new file system. The data restored from the backup is lazy-loaded onto the file system, during which time you will experience slightly higher latency.


The following procedure guides you through how to restore a backup using the console to create a new file system.

To restore a file system from a backup

  1. Open the Amazon FSx for Lustre console at https://console.aws.amazon.com/fsx/.
  2. From the console dashboard, choose Backups from the left side navigation.
  3. Choose the backup that you want to restore from the Backups table, and then choose Restore backup.
    Doing so opens the file system creation wizard. This wizard is identical to the standard file system creation wizard, except the file system configuration (e.g., Deployment Type, throughput per unit of storage). However, you can change the associated VPC, and backup settings.
  4. Complete the wizard as you do when you create a new file system.
  5. Choose Review and create.
  6. Review the settings you chose for your Amazon FSx for Lustre file system, and then choose to Create file system.


You have restored from a backup, and a new file system is now being created. When its status changes to AVAILABLE, you can use the file system as normal.


Deleting backups

Deleting a backup is a permanent, unrecoverable action. Any data in a deleted backup is also deleted. Do not delete a backup unless you're sure you won't need that backup again in the future.


To delete a backup

  1. Open the Amazon FSx for Lustre console at https://console.aws.amazon.com/fsx/.
  2. From the console dashboard, choose Backups from the left side navigation.
  3. Choose the backup that you want to delete from the Backups table, and then choose Delete backup.
  4. In the Delete backups dialog box that opens, confirm that the ID of the backup identifies the backup that you want to delete.
  5. Confirm that the check box is checked for the backup that you want to delete.
  6. Choose Delete backups.


Your backup and all included data are now permanently and unrecoverably deleted.


Reference:

    https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-backups-fsx.html