Best Practice 12.1 – Establish a method for consistent recovery of business data
Define data recovery plans that can help ensure business data consistency for an individual system in the event of data loss or corruption.
Suggestion 12.1.1 - Ensure that database backups are consistent by using backup mechanisms that are aware of database state
SAP provides mechanisms for integrating with a database vendor’s backup capability (for example, brtools) and providing visibility within SAP transactions or management consoles. In addition, there are options to integrate with third-party backup providers or storage solutions including AWS Backint Agent for SAP HANA. These supported options have awareness of database state, continuously capturing changes or quiescing the database (pausing or reducing activity) while a consistent copy is taken, for example using storage snapshots.
Review the SAP guides for individual database vendors as well as AWS documentation:
-
AWS Documentation: AWS Backint Agent for SAP HANA
-
SAP Documentation: Guide Finder for SAP NetWeaver and ABAP Platform
-
SAP on AWS Blog: How to back up Microsoft SQL Server databases for SAP with VSS Snapshots
-
AWS Blog: Taking crash-consistent snapshots across multiple Amazon EBS volumes on an Amazon EC2 instance
Suggestion 12.1.2 – Evaluate the durability and recoverability of file-based data critical to your business
Business data that is not stored within a database might require a separate backup strategy.
In a standard SAP NetWeaver system, this often includes file-based interface files,
SAP transport directory contents, and logs including batch logs, job logs, and work process
directory logs. Non-SAP NetWeaver and supporting systems, such as document management
solutions, might have other file-based business data which should be evaluated. Evaluate
Amazon EFS
File system backups can be performed using snapshots, AWS Backup
Business data should be evaluated independently from binaries and configuration data, which might be able to be re-provisioned via SAP download, re-install, or infrastructure as code.
-
SAP Lens [Operational Excellence]: Suggestion 12.2.1 - Define infrastructure as code approach to the creation and change of configuration
-
SAP Lens [Operational Excellence]: Suggestion 12.2.2 - Define an approach for backups of file system contents, including the root volume
Suggestion 12.1.3 – Evaluate the durability and location of database backups and logs
Backups and logs contain a record of your live data, but can themselves be susceptible to failure. Consider how you minimize the impact of a failure by evaluating the location of your backups in relation to your active data copies. It’s important to consider the following:
-
The time it takes to secure the backups – impacting your recovery point
-
The time it takes to retrieve/recover the backups – impacting your recovery time
Additional information:
-
AWS Documentation: AWS Backint Agent for HANA
-
AWS Documentation: FSR (Fast Snapshot Restores)
-
AWS Documentation: Amazon S3 Replication options
Suggestion 12.1.4 – Evaluate your requirements for a point-in-time recovery
If you have a requirement to recover to any particular point in time, does your backup design allow for this? Is the backup method database-aware and can you roll your database forward to a consistent recovery point? Have you considered any file-based recovery required for consistency?
Consider the following:
-
The log interval and how quickly logs are secured
-
Incremental or differential backups to improve the recovery time
-
If a backup catalog or other mechanism is required
-
Is it possible to use database or storage options to go back in time?
Suggestion 12.1.5 – Review mechanisms for recovery caused by data loss
Determine the implications of recovering from a significant data loss situation, such as data corruption, deletion, or a faulty code deployment that is unable to be reverted. Evaluate the propagation of data loss when using database or storage-based replication, and the RTO and RPO impact of using a secondary restore mechanism, such as backups.
Suggestion 12.1.6 – Create a data bunker
Following the guidance in Suggestion 10.3.7 - Determine in which failure scenarios a recovery from backup would be necessary, create a data bunker to secure your backups from accidental deletion or malicious activities.