81 lines
2.6 KiB
Markdown
81 lines
2.6 KiB
Markdown
---
|
||
title: "CTP Topic 73 AWS Backup implementation of the Cloud Transformation Program"
|
||
type: source
|
||
tags: [AWS, Backup, CTP]
|
||
date: 2026-04-14
|
||
---
|
||
|
||
## Source File
|
||
- [[raw/Cloud & DevOps/Public-Cloud-Learning-Sessions/01_AWS-Landing-Zone/ctp-topic-73-aws-backup-implementation-of-the-cloud-transformation-program.md]]
|
||
|
||
## Summary
|
||
|
||
### 核心主题
|
||
AWS Backup 在云转型计划（CTP）中的实施，标准化备份流程。
|
||
|
||
### 问题域
|
||
- 生产工作负载的备份策略
|
||
- 跨账户跨区域备份设计
|
||
- SRE 模型的备份自动化
|
||
|
||
### 方法/机制
|
||
- AWS Backup 作为统一备份工具
|
||
- SRE 模型：允许产品组创建和控制备份
|
||
- 初始备份 + 复制到 DR 账户
|
||
- AWS Backup Audit Manager 审计与合规报告
|
||
|
||
### 结论/价值
|
||
- 备份策略灵活性和标准化兼顾
|
||
- 支持点时间恢复（PITR）
|
||
- 开箱即用的审计框架
|
||
- DR 账户存储备份，实现即时恢复
|
||
|
||
---
|
||
|
||
## Key Claims
|
||
|
||
- 生产工作负载备份策略要求：每24小时至少备份一次，保留至少30天，两个备份位置
|
||
- AWS Backup 设计：源账户初始备份 → 复制到 DR 账户/区域，支持无 DR 账户时使用 Databunker 作为集中备份账户
|
||
- SRE 备份模型简化 AWS Backup 采用：备份计划、选择、金库、KMS 策略、生命周期策略、审计报告等自动化
|
||
- AWS Backup Audit Manager 提供合规控制评估：备份计划保护、最小频率和保留、防止删除恢复点、加密恢复点、跨区域跨账户备份
|
||
|
||
---
|
||
|
||
## Key Quotes
|
||
|
||
> "AWS Backup was chosen as the strategic tool for backup in the cloud transformation program to standardize backup processes."
|
||
> "The design involves taking initial backups within the source accounts and copying them to a remote account and region, ideally a dedicated DR account."
|
||
> "AWS Backup Audit Manager provides out-of-the-box reports and compliance reports to evaluate backup practices."
|
||
|
||
---
|
||
|
||
## Key Concepts
|
||
|
||
- [[AWS-Backup]]: AWS 原生备份服务，支持多种 AWS 资源备份
|
||
- [[SRE]]: 站点可靠性工程，SRE 团队设计备份模型
|
||
- [[DR-Account]]: 灾难恢复账户，存储备份副本
|
||
- [[KMS-Key]]: AWS Key Management Service，备份加密
|
||
- [[PITR]]: Point-in-Time Restore，点时间恢复
|
||
|
||
---
|
||
|
||
## Key Entities
|
||
|
||
- [[AWS]]: 亚马逊云科技
|
||
- [[SRE]]: 站点可靠性工程团队
|
||
- [[Gruntwork]]: Landing Zone 框架提供商
|
||
- [[CTP]]: Cloud Transformation Program，云转型计划
|
||
|
||
---
|
||
|
||
## Connections
|
||
|
||
- [[AWS]] ← uses ← [[AWS-Backup]]
|
||
- [[SRE]] ← provides ← [[SRE-Models-for-Backup]]
|
||
- [[CTP]] ← implements ← [[AWS-Backup]]
|
||
|
||
---
|
||
|
||
## Contradictions
|
||
|
||
- （暂无） |