Migrate a table using AWS Backup for cross-account backup and restore - Amazon DynamoDB
Enable advanced featuresCreate a backup vaultCreate a DynamoDB table backupCopy the DynamoDB table backupRestore the DynamoDB table backup

Migrate a table using AWS Backup for cross-account backup and restore

Prerequisites

  • Source and target AWS accounts must belong to the same organization in the AWS Organizations service

  • Valid AWS Identity and Access Management (IAM) permissions to create and use AWS Backup vaults

For more information about setting up cross-account backups, see Creating backup copies across AWS accounts.

Pricing information

AWS charges for the backup (based on the table size), any data copying between AWS Regions (based on the amount of data), for the restore (based on the amount of data), and for any ongoing storage charges. To avoid ongoing charges, you can delete the backup if you don't need it after the restore.

For more information about pricing, see AWS Backup pricing .

Step 1: Enable advanced features for DynamoDB and cross-account backup

  1. In both the source and target AWS account, access the AWS Management Console and open the AWS Backup console.

  2. Choose the Settings option.

  3. Under Advanced features for Amazon DynamoDB backups, confirm that Advanced features is enabled. If it isn't, choose Enable.

  4. Under Cross-account management, for Cross-account backup, choose Turn On.

Step 2: Create a backup vault in the source account and target account

  1. In the source AWS accounts, open the AWS Backup console.

  2. Choose Backup vaults.

  3. Choose Create Backup vault.

  4. Copy and save the Amazon Resource Name (ARN) of the created backup vaults and the target AWS account.

  5. You'll need the ARNs of both the source and target backup vaults when copying the DynamoDB table backup between accounts.

Step 3: Create a DynamoDB table backup in the source account

  1. On the AWS Backup Dashboard page, choose Create on-demand backup.

  2. In the Settings section, select DynamoDB as the Resource type, and then select the table name.

  3. In the Backup vault dropdown list, select the backup vault you created in the source account.

  4. Select the desired Retention period.

  5. Choose Create on-demand backup.

  6. Monitor the status of the backup job on the Backup Jobs tab of the AWS Backup Jobs page.

Step 4: Copy the DynamoDB table backup from the source account to the target account

  1. After the backup job completes, open the AWS Backup console in the source account and choose Backup vaults.

  2. Under Backups, choose the DynamoDB table backup. Choose Actions and then Copy.

  3. Enter the AWS Region of the target account.

  4. For External vault ARN, enter the ARN of the backup vault you created in the target account.

  5. In the target account backup vault, enable access from a source account to allow copying backups.

Step 5: Restore the DynamoDB table backup in the target account

  1. In the target AWS account, open the AWS Backup console and choose Backup vaults

  2. Under Backups, select the backup you copied from the source account. Choose Actions, then Restore.

  3. Enter the name for the new DynamoDB table, the encryption that this new table will have, the key you want the restore to be encrypted with, and any other options.

  4. When the restore is completed, the table status will show as Active.