AWS Backup is a fully managed backup service that makes it easy to centralize and automate the backup of data across AWS services. Using backup service data is stored within or across the region, how ever when AWS account is handed over to customers their internal teams spin up new instances in production account and sometimes by third party vendor new servers are created.
AWS Backup service can detect only servers which are added with ‘Tag’, in case newly launched instances are with absence of tags the Backup Service will not be able to detect and perform backup for that service and it can lead to big data loss in case server gets crashed.
To avoid such incidents ACME has automated backup for newly launched instances using following services:
All resources from different accounts are backed up in single centralized account and account access has been given to only responsible team members.
Below diagram illustrates the working of backup mechanism.