AWS Backup adds logically air-gapped vault support for Amazon FSx for NetApp ONTAP

AWS Backup's logically air-gapped vault now supports Amazon FSx for NetApp ONTAP. Logically air-gapped vaults allow secure backup sharing between accounts or AWS Organizations, enabling direct restores to reduce recovery time from data loss events. Immutable backups are locked by default and encrypted with AWS-owned or customer-managed keys. FSx for NetApp ONTAP backups can be stored in logically air-gapped vaults in the same or another account or region, reducing downtime risk, ensuring business continuity, and meeting compliance and disaster recovery requirements. This can be initiated via the AWS Backup console, AWS CLI, or AWS SDK by specifying a logically air-gapped vault as the primary target or copy destination for FSx for NetApp ONTAP backups. Use AWS Resource Access Manager (RAM) to share vaults across accounts with multi-party approval to protect vault access during account compromise. Recovery jobs can be started directly from the target account, eliminating copy overhead. This support is available in all AWS regions where both logically air-gapped vaults and Amazon FSx for NetApp ONTAP are available.

Why it matters

This update is useful for organizations that need to reduce recovery time from data loss and ensure business continuity.