Description: 

Elastic Block Store (EBS) is an easy to use, high performance block storage service designed for use with Amazon Elastic Compute Cloud (EC2) for both throughput and transaction intensive workloads at any scale. The policy checks if EBS storage service has controlled access and its backup schedules are configured.


Remediation: 

Amazon Elastic Block Store (Amazon EBS) enables you to back up volumes at any time using EBS snapshots. Volume backups can be triggered manually or they can be scheduled using Amazon Data Lifecycle Manager (Amazon DLM) or AWS Backup.


Each backup creates a unique EBS snapshot. The snapshot has all of the data necessary to restore the volume to the exact state that it was in when the backup was made. You can then attach that volume to an Amazon EC2 instance.


Restore a volume from an EBS snapshot

The first step to recovering your files is to identify the EBS snapshot that contains the needed data and then create a volume from it.

  • On the Create Volume page, you are prompted to choose the volume type, volume size, and the Availability Zone in which the volume should be created. The default volume type is either gp2 or standard, depending on the AWS Region. That is applicable to most use cases.
  • The default volume size is the size of the volume from which the EBS snapshot was created. For recovering files and folders, the size should not be modified. Create a new volume that is an exact copy of the original volume.
  • For the Availability Zone, select the same zone as the EC2 instance to be used for recovery. EBS volumes can only be attached to EC2 instances in the same zone in which they were created. Tag the new volume for identification.
  • Select the new volume to monitor the status until the state is set to available.


Attach the volume to an EC2 instance

To access the files or folders to be recovered, the volume must be attached to an EC2 instance. The instance should be running the same version of Windows or Linux that was running when the volume backup was made. The instance does not need to be stopped, as an EBS volume can be attached to a running EC2 instance.


Recover your files on Windows

If your files were originally created on Windows, connect to the Windows EC2 instance using a desktop viewer that supports RDP. Then, make the EBS volume available for use.

  • Open Windows Explorer, navigate to the files or folders to be recovered and copy them to the desired destination.
  • When the recovery effort is complete, you can unmount the volume and detach it from the EC2 instance.


Recover your files on Linux

If your files were originally created on Linux, begin by logging in to the Linux EC2 instance using SSH. Then, make the EBS volume available for use.

  • The new volume can be identified by the name that corresponds to the device ID specified when the volume was attached to the instance.
  • When the recovery effort is complete, you can unmount the volume and detach it from the EC2 instance.


Clean up

With the files or folders recovered and the volume detached, you are free to delete the volume. You can always re-create it from the EBS snapshot as needed.


Reference:  

    https://aws.amazon.com/blogs/compute/recovering-files-from-an-amazon-ebs-volume-backup/

    https://aws.amazon.com/premiumsupport/knowledge-center/back-up-instance-store-ebs/