Skip to main content

Protect EBS Snapshots from 3rd-Party Backup Vendors

© 2024 Elastio Software, Inc. All Rights Reserved.

Protect EBS Snapshots from 3rd-Party Backup Vendors

Updated

Elastio seamlessly integrates with EBS snapshots from any third-party backup vendor. Many backup providers support custom tags for their snapshots, and for those that don’t, we provide a CloudFormation template (CFN) as an alternative. Both options are detailed below.

Contents

Protecting Veeam Backup Snapshots with Elastio

Elastio seamlessly integrates with Veeam Backup Snapshots by modifying the Veeam policies and adding the following tags to the snapshots:

elastio:action=scan
elastio:scans=ransomware malware fs-check

In this example, both ransomware detection and malware scanning are enabled.

Protecting Rubrik Backups with Elastio

Elastio seamlessly integrates with Rubrik Backups by adding the following custom tags in Rubrik:

  1. Log in to RSC.
  2. Click  and select Settings.
  3. Click Cloud Accounts and select AWS.
  4. Open the ellipsis menu and select Manage Custom Tags.
  5. Click Add Custom Tag.

  6. Enter the following key value pairs:
    elastio:action=scan
    elastio:scans=ransomware malware fs-check

    Clear the Custom tags created here will overwrite existing tags with same keys. Uncheck the box to keep existing tags checkbox to keep existing tags.

  7. Click Add.

Protecting Backups Without Custom Tag Support

If your backup vendor does not support custom tags, you can achieve the same functionality by deploying the Snapshot Tagger using a CloudFormation template. Follow these steps:

Step 1: Download the YAML File

  1. Access the Snapshot Tagger CloudFormation page.
  2. Download the YAML file.

Step 2: Create a CloudFormation Stack

  • Open the AWS CloudFormation console.
  • Click Create stack.
  • Under Prepare template, select Choose an existing template, then click Upload a template file.
  • Upload the downloaded YAML file and click Next.

Step 3: Configure Stack Details

  1. Stack name: Provide a name for your stack.
  2. Parameters:
    • ElastioActionTagValue: Enter scan.
    • TagKey to Monitor: Specify the tags' keys automatically generated by your backup vendor.
      • For example, Veritas Alta uses tags such as cp:data and cp:host-snapshot-name.
      • In this case, enter cp:data, cp:host-snapshot-name.

Step 4: Review and Launch

  1. Leave all settings as default.

  2. Acknowledge the prompt:

    "I acknowledge that AWS CloudFormation might create IAM resources."

  3. Click Next.
  4. Click Submit.

Result

Once the stack is deployed, Elastio automatically scans all snapshots with the specified tag keys.

Related articles