Assign resources to a backup plan
Resource assignment specifies which resources AWS Backup will protect using your backup plan. AWS Backup gives you both simple default settings and fine-grained controls to assign resources to your backup plan. Each time your backup plan runs, it scans your AWS account for all resources that match your resource assignment criteria. This level of automation allows you to define your backup plan and resource assignment exactly once. AWS Backup abstracts away the work of finding and backing up new resources that fit your earlier-defined resource assignment.
You can assign any AWS Backup-supported resource types that you have opted in for AWS Backup to manage. For instructions on how to opt in to more AWS Backup-supported resource types, see Service Opt-in.
The AWS Backup console has two ways to include resource types in a backup plan: explicitly assign the resource type in a backup plan or include all resources. See the points below to understand how these selections work with service opt ins.
-
If resource assignments are only based on tags, then service opt-in settings are applied.
-
If a resource type is explicitly assigned to a backup plan, it will be included in the backup even if the opt-in is not enabled for that particular service. This does not apply to Aurora, Neptune, and Amazon DocumentDB. For these services to be included, the opt-in must be enabled.
-
If both resource type and tags are specified in a resource assignment, the specified resource types are filtered first, then tags further filter those resources.
Service opt-in settings are ignored for most resource types. However Aurora, Neptune, and Amazon DocumentDB require service opt-in.
-
When an account uses AWS Backup (creates a backup vault or backup plan) in a Region, the account automatically is opted into all resource types supported by AWS Backup in the Region at that time. Supported services added to that Region at a later date will not be automatically included in a backup plan. You can choose to opt into those resource types once they become supported.
-
For Amazon FSx for NetApp ONTAP, when using tag-based resource selection, apply tags to individual volumes instead of the whole file system.
Your resource assignment can include (or exclude) resource types and resources.
-
A resource type includes every instance or resource of an AWS Backup-supported AWS service or third-party application. For example, the DynamoDB resource type refers to all your DynamoDB tables.
-
A resource is a single instance of a resource type, such as one of your DynamoDB tables. You can specify a resource using its unique resource ID.
You can further refine your resource assignment using tags and conditional operators.
Topics
Quotas on resource assignment
The following quotas apply to a single resource assignment:
-
500 Amazon Resource Names (ARNs) without wildcards
-
30 ARNs with wildcard expressions
-
30 conditions
-
30 tags per resource assignment (and an unlimited number of resources per tag)
