本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。 # 监控 AWS Backup AWS Backup 与其他 AWS 工具配合使用，使您能够监控其工作负载。这些工具包括： + [AWS Backup 控制台仪表板](backup-dashboards.md) + 作业控制面板提供作业运行状况监控功能，您可以在其中查看那些显示作业成功和失败情况的指标（按原因、账户、区域和资源类型筛选）。 + 作业控制面板可在支持 Audit M AWS Backup anager 的地区使用。有关这些区域，请参阅[功能可用性来自 AWS 区域](backup-feature-availability.md#features-by-region)。所有其他区域都将能够访问 [CloudWatch 仪表板](cloudwatch.md#cloudwatch-dashboard)。 + **亚马逊 CloudWatch**和**亚马逊 EventBridge**将监控 AWS Backup 流程。 + 您可以使用 CloudWatch 来跟踪指标、创建警报和查看仪表板。有关更多信息，请参阅 [AWS Backup Amazon 的指标 CloudWatch](cloudwatch.md)。 + 您可以使用 EventBridge 来查看和监视 AWS Backup 事件。有关更多信息，请参阅 [使用 Amazon 监控 AWS Backup 事件 EventBridge](eventbridge.md)。 + **AWS CloudTrail**以监控 AWS Backup API 调用。您可以识别发出这些调用的时间、源 IP、用户和账户。有关更多信息，请参阅 [使用记录 AWS Backup API 调用 CloudTrail](logging-using-cloudtrail.md)。 + **亚马逊简单通知服务** (Amazon SNS)，用于订阅 AWS Backup相关主题，例如备份、还原和复制事件。有关更多信息，请参阅 [带有的通知选项 AWS Backup](backup-notifications.md)。 # AWS Backup 控制台仪表板 **注意** 所有支持 Audit Manager 的 AWS Backup 区域均提供作业控制面板。有关这些区域，请参阅[功能可用性来自 AWS 区域](backup-feature-availability.md#features-by-region)。所有其他区域都将能够访问 [CloudWatch 仪表板](cloudwatch.md#cloudwatch-dashboard)。 **Topics** + [备份控制面板概述](#backup-dashboards-overview) + [查看作业控制面板](#backup-dashboards-viewing) + [作业问题原因](#problematic-reasons) + [通过获取仪表板数据 AWS CLI](#dashboard-data-cli) ## 备份控制面板概述 AWS Backup 在控制台中提供了作业控制面板，可帮助您监控备份、复制和还原作业的运行状况。通过命令行可以检索控制台中直观显示的相同数据 AWS CLI。 使用作业控制面板可通过组织级别或成员账户监控来识别备份、复制和还原作业的问题。借助这些信息，您可以识别和诊断事件和可能的问题，以帮助确保活动的真实性。 作业控制面板可以显示两个时间范围的数据。默认情况下，会显示最近 14 天的数据，但您可以更改视图以显示最近 7 天的数据。如果您更改时间范围，数据将更新以反映新时间间隔中的情况。 请注意，控制面板会显示上个 0:00（世界标准时间）之前的数据；也就是说，不包括当天的数据。控制面板每天大约在世界标准时间 1:30-2:30 更新。 ## 查看作业控制面板 要查看作业仪表板，请[登录 AWS Backup 控制台](https://console.aws.amazon.com/backup/)并在左侧导航栏中选择**作业仪表板**。 在作业控制面板页面上，您可以从备份、复制或还原作业选项卡中进行选择。 作业控制面板概述显示指定时间范围内作业活动的汇总视图，包括已完成、已完成但存在问题、已过期和失败的作业。默认情况下，显示最近 14 天的数据，但您可以将视图更改为显示 7 天的数据。 **注意** `Completed with issues` 是控制台中显示的作业的状态，表示已完成的作业，并带有状态消息。 ### 作业运行状况 折线图显示一段时间内的成功和失败作业率线。成功率线显示已完成以及已完成但存在问题的作业的汇总。失败率线根据指定的时间范围显示失败和已过期作业的总和。 处于未完成或非失败状态的作业（状态为已创建、待处理、正在运行、已中止、正在中止或部分的作业）未包括在内；百分比总数可能不等于 100%。 ### 一段时间内的作业状态 使用条形图，您可以生成自定义条形图，显示每个类别（已完成、已完成但存在问题、失败和已过期）中的作业数（按天数分布）。 在下拉菜单中，选择要在图表中看到的状态、资源类型和 AWS 区域。如果您想进一步浏览您的选项，请选择**查看作业**以查看作业/跨账户监控页面中预先筛选出的部分。 您可以将鼠标悬停在条形上方以显示弹出窗口，其中显示所选日期的详细作业数据。 ### 有问题的作业 **有问题的**作业是指状态为“失败”、“已过期”或“已完成但存在问题”的作业。每个图表都显示相应的指标，其中包含账户、资源类型或所含有问题作业数量最多的主要原因。 默认显示屏按指定指标降序对控制面板小部件进行排序，首先列出属于该指标的有问题作业数量最多的指标。 只有具有通过 Organizations 进行访问的权限的账户（例如，管理账户和委派管理员账户）中才会显示有问题的主要账户。如果显示，您可以将鼠标悬停在账户上方以显示属于所选账户的有问题作业的数量。 您可以在图表中选择一个条形来打开弹出窗口。在此窗口中，您可以选择作业状态以打开按所选状态筛选的作业/跨账户监控表。 ## 作业问题原因 **主要问题原因**小部件显示错误消息所属的消息代码类别。但是，该类别可能无法解释作业遇到的问题。展开下面的消息代码类别，查看有关您的作业可能遇到的特定消息或错误的更多详细信息。所有不属于以下消息代码类别的错误消息都将归入 “其他” 类别。 ### “VSS\$1ERROR” + “Windows VSS 备份尝试失败，因为实例或 SSM 代理的状态无效或权限不足。” + “由于权限不足，无法执行此操作，Windows VSS 备份尝试失败” + “Windows VSS 备份尝试失败，因为实例中未安装 ec2-vss-agent.exe” + “尝试定期备份时遇到 Windows VSS 备份作业错误” + “由于启用 VSS 的快照创建操作超时，Windows VSS 备份尝试失败” + “由于 Windows Server 版本不受支持，Windows VSS 备份尝试失败。支持的版本为 Windows Server 2012 或更高版本。” + “由于启用 VSS 的快照创建操作超时，Windows VSS 备份尝试失败” ### “LIMIT\$1EXCEEDED” + “已超过订阅者限制：您已达到最大并发备份数，即 300。等待其他作业完成，然后重试。您也可以联系 支持 以申请增加配额。” + “已超过单个卷允许的最大处理中快照数。” + “已超过允许的最大活动快照限制。” + “由于 EBS 卷上的并发快照数量上限，映像创建受到限制。” + “无法创建 20 个以上的用户快照” + “生成的标签集所含用户标签数不能超过 50 个。” + “您的账户/数据库已达到支持的最大备份数。有关更多信息，请参阅 Timestream 开发人员指南中的配额。” + “您已达到该区域允许的公共和私有镜像数量配额，即 50,000 个。取消注册未使用的镜像，或者请求增加您的 AMI 配额。” + “您的备份成功了，但是由于 NetworkInterfaces 元数据的大小超出了我们的内部限制，我们无法保留元数据。” + “REGEX\$1 已超出订阅限制” + “REGEX\$1 指定的标签超过了 50 个” + “REGEX\$1 最多有” ### “ACCESS\$1DENIED” + “您无权执行此操作。” + “尝试呼叫 AWS Backup 服务时访问被拒绝” + “客户凭证错过了获取存储桶版本控制的权限。” + “ AWS Marketplace 无法将来自的图像复制到其他 AWS 帐户。” + “复制作业失败，因为使用默认的备份务托管密钥为目标备份保管库加了密。无法复制此保管库的内容。只能复制通过 AWS KMS 密钥加密的 Backup 保管库中的内容。 + 使用加密的快照 AWS 托管式密钥 无法共享。指定另一个快照。 + “无法共享使用 Amazon EBS 默认密钥加密的快照 + “复制作业失败。源和目标账户必须均是同一组织的成员。” + “REGEX\$1 拒绝访问” + “REGEX\$1 无权” + “REGEX \$1cannot 假设为 AWS Backup + “REGEX\$1 没有权限” + “REGEX\$1 缺少权限” ### “CONCURRENT\$1JOB” + “备份作业失败，因为同一资源有正在运行的作业。” + “运行的拷贝作业太多了，资源不足。” ### “FEATURE\$1NOT\$1ENABLED” + “复制作业失败。当前组织未启用跨账户复制功能。” ### “JOB\$1EXPIRED” + “备份作业在完成之前就已过期。” ### “INVALID\$1LIFECYCLE” + “复制作业失败。作业中指定的保留期不在为目标备份保管库指定的范围内。” + “REGEX\$1 无法启动，因为它要么在所配置的每周维护时段之内，要么离该时段太近” + “REGEX\$1 无法启动，因为它要么在所配置的自动备份时段之内，要么离该时段太近” ### “INVALID\$1STATE” + “REGEX\$1 实例未处于状态” + “REGEX\$1 未处于可用状态” + “REGEX\$1 未处于可用状态” + “REGEX\$1 无法为卷创建快照” ### “KMS\$1KEY\$1ERROR” + “KMS 密钥已禁用或待删除，或者对 KMS 密钥的访问被拒绝” + “无法访问给定密钥 ID” + “AMI 快照复制失败，错误为：无法访问给定的密钥 ID。您必须拥有默认密钥的 DescribeKey 权限” + “REGEX\$1 kms 密钥” ### “ACCESS\$1KEY\$1ERROR” + “ AWS 访问密钥 ID 需要订阅服务” ### “HYPERVISOR\$1OFFLINE” + “此操作对指定的管理程序无效，因为它不在线” ### “RESOURCE\$1NOT\$1FOUND” + “找不到指定的卷。” + “找不到虚拟机。” + “给定密钥 ID 不存在” + “找不到表。” + “REGEX\$1 不存在” + “REGEX\$1 找不到资源” + “REGEX\$1 找不到 cryopod” + “REGEX\$1 找不到恢复点” + “REGEX\$1 找不到资源” + “REGEX\$1 不再可用” + “REGEX\$1 无效” ### “RESOURCE\$1NOT\$1SUPPORTED” + “REGEX\$1 资源类型不受支持” + “REGEX\$1 资源类型不受支持” ### “TAG\$1COPY\$1ERROR” + “由于内部故障，我们无法将资源标签复制到您的备份中。” + “由于源或目标恢复点不可用，我们无法将资源标签复制到您的备份中” ### “TOKEN\$1EXPIRED” + “令牌已过期。请重试。” ### “UNSUPPORTED\$1OPERATION” + “在创建快照期间，虚拟机管理程序不支持该CreateSnapshot 方法。备份作业已中止” + “UnsupportedOperation : Storage Gateway 备份副本需要用户创建的备份保管库和目标位置的密钥。” + “REGEX\$1 功能不受所提供的资源类型支持。” ### “FATAL\$1ERROR” + “出现内部错误。” + “复制作业遇到了致命错误。请联系 S AWS upport 寻求进一步帮助。” + “复制作业遇到了致命错误。” + “REGEX\$1 备份作业遇到了致命错误” ## 通过获取仪表板数据 AWS CLI 您可以使用命令行检索控制台中显示的相同数据。使用以下 CLI 命令之一： + [https://awscli.amazonaws.com/v2/documentation/api/latest/reference/backup/list-backup-job-summaries.html](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/backup/list-backup-job-summaries.html) + [https://awscli.amazonaws.com/v2/documentation/api/latest/reference/backup/list-copy-job-summaries.html](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/backup/list-copy-job-summaries.html) + [https://awscli.amazonaws.com/v2/documentation/api/latest/reference/backup/list-restore-job-summaries.html](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/backup/list-restore-job-summaries.html) 您可以在每条命令中包含有效的参数： ``` BackupJobSummaries (list) Region (string), Account (string), State (string), ResourceType (string), MessageCategory (string), AggregationPeriod: (string), NextToken (string), MaxResults (number) CopyJobSummaries (list) Region (string), Account (string), State (string), ResourceType (string), MessageCategory (string), AggregationPeriod: (string), NextToken (string), MaxResults (number) RestoreJobSummaries (list) Region (string), Account (string), State (string), ResourceType (string), AggregationPeriod: (string), NextToken (string) ``` 此示例显示了一个请求示例，其中用户输入了 `list-backup-job-summaries`，请求需要返回过去 14 天内状态为 `FAILED` 的所有可用账户： ``` GET /audit/backup-job-summaries/ ?accountId=ANY &state=FAILED &aggregationPeriod=FOURTEEN_DAYS ``` 要获取状态为 `completed with issues` 的作业的作业计数，请从 `COMPLETED` 总数中减去 `MessageCategory` 为 `SUCCESS` 的 `COMPLETED` 作业的作业计数。 # 使用 Amazon 监控 AWS Backup 事件 EventBridge AWS Backup 当备份或复印任务的状态发生变化 EventBridge 时，向 Amazon 发送事件。您可以使用 EventBridge 来监视 AWS Backup 事件。例如，当备份任务失败时，您可以收到警报。 AWS Backup 每 5 分钟以最大努力 EventBridge 的方式将事件发送到一次。 要使用跟踪事件 EventBridge，请参阅以下内容： + [创建对事件做出反应的规则](https://docs.aws.amazon.com/eventbridge/latest/userguide/create-eventbridge-rule.html)（*Amazon EventBridge 用户指南*） + [的亚马逊 CloudWatch 事件和指标 AWS Backup](https://aws.amazon.com/blogs/storage/amazon-cloudwatch-events-and-metrics-for-aws-backup/)（博客——参见*配置要发送到亚马逊 AWS Backup 的事件 EventBridge*） 有些事件会报告 `status: COMPLETED`，而另一些事件会报告 `state: COMPLETED`。这与 AWS Backup API 一致。有些状态是 AWS Backup 控制台特有的：状态 `Completed with issues` 表示带有状态消息的 `Completed` 作业。要监控 `Completed with issues` 事件，请监控带有状态消息的 `COMPLETED` 作业。请注意，这仅适用于备份作业。 您也可以使用 AWS Backup 通知 API 通过亚马逊简单通知服务 (Amazon SNS) Simple Notification Service 跟踪 AWS Backup 事件。但是， EventBridge 跟踪的更改多于通知 API 的更改，包括对备份库的更改、复印任务状态、区域设置以及冷恢复点或温恢复点的数量。 **Topics** + [备份作业事件](#aws-backup-events-backup-job) + [备份计划事件](#aws-backup-events-backup-plan) + [备份保管库事件](#aws-backup-events-backup-vault) + [复制作业事件](#aws-backup-events-copy-job) + [恢复点事件](#aws-backup-events-recovery-point) + [区域设置事件](#aws-backup-events-region-settings) + [还原作业事件](#aws-backup-events-restore-job) + [恢复点索引事件](#aws-backup-recovery-point-indexing) + [恶意软件扫描 Job 事件](#aws-backup-events-malware-scan-job) ## 备份作业事件 以下是示例事件。 **Topics** + [FAILED](#backup-job-state-change-failed) + [COMPLETED](#backup-job-state-change-completed) + [RUNNING](#backup-job-state-change-running) + [ABORTED](#backup-job-state-change-aborted) + [EXPIRED](#backup-job-state-change-expired) + [PENDING](#backup-job-state-change-pending) + [CREATED](#backup-job-state-change-created) ### 状态：FAILED ``` { "version": "0", "id": "710b0398-d48e-f3c3-afca-cfeb2fdaa656", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T20:15:26Z", "region": "us-west-2", "resources": [], "detail": { "backupJobId": "34176239-e96d-4e1d-9fad-529dbb3c3556", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86", "backupVaultName": "9ab3e749-82c6-4342-9320-5edbf4918b86", "bytesTransferred": "0", "creationDate": "2020-07-29T20:13:07.392Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupTestRole", "resourceArn": "arn:aws:service:us-west-2:1112233445566:resource-type/resource-id", "resourceType": "type", "state": "FAILED", "statusMessage": "\"Backup job failed because backup vault arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86 does not exist.\"", "startBy": "2020-07-30T04:13:07.392Z", "percentDone": 0, "retryCount": 3 } } ``` ### 状态：COMPLETED ``` { "version": "0", "id": "dafac799-9b88-0134-26b7-fef4d54a134f", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T21:41:17Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:f1d966fe-a3bd-410b-b292-99f442d13b56" ], "detail": { "backupJobId": "a827233a-d405-4a86-a440-759fa94f34dd", "backupSizeInBytes": "36048", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9732c1b4-1091-472a-9d9f-52e0565ee39a", "backupVaultName": "9732c1b4-1091-472a-9d9f-52e0565ee39a", "bytesTransferred": "36048", "creationDate": "2020-07-15T21:40:31.207Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupTestRole", "resourceArn": "arn:aws:service:us-west-2:1112233445566:resource-type/resource-id", "resourceType": "type", "state": "COMPLETED", "completionDate": "2020-07-15T21:41:05.921Z", "startBy": "2020-07-16T05:40:31.207Z", "percentDone": 100, "retryCount": 3 } } ``` ### 状态：RUNNING ``` { "version": "0", "id": "44946c39-b519-3505-44e6-ba74afeb2e30", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T21:39:13Z", "region": "us-west-2", "resources": [], "detail": { "backupJobId": "B6EC38D2-CB3C-EF0A-F5A4-3CF324EF4945", "backupSizeInBytes": "3221225472", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:e6625738-0655-4aa9-bd37-6ec1dd183b15", "backupVaultName": "e6625738-0655-4aa9-bd37-6ec1dd183b15", "bytesTransferred": "0", "creationDate": "2020-07-15T21:38:31.152Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/FullBackupTestRole", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:volume/vol-0b5ae24f2ee72d926", "resourceType": "EBS", "state": "RUNNING", "startBy": "2020-07-16T05:00:00Z", "expectedCompletionDate": "Jul 15, 2020 9:39:07 PM", "percentDone": 99, "createdBy": { "backupPlanId": "bde0f455-4e24-4668-aeaa-4932a97f5cc5", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:bde0f455-4e24-4668-aeaa-4932a97f5cc5", "backupPlanVersion": "YTkzNmM0MmUtMWRhNS00Y2RkLThmZGUtNjA5NTc4NGM1YTc5", "backupPlanRuleId": "1f97bafa-14d6-4f39-94fd-94b51bd6d0d5" } } } ``` ### 状态：ABORTED ``` { "version": "0", "id": "4c91ceb0-b798-da82-6818-c29b3dce7543", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T21:33:16Z", "region": "us-west-2", "resources": [], "detail": { "backupJobId": "58cdef95-7680-4c74-80d5-1b64093999c8", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:f59bffcd-2538-4bbe-8343-1c60dae27c27", "backupVaultName": "f59bffcd-2538-4bbe-8343-1c60dae27c27", "bytesTransferred": "0", "creationDate": "2020-07-15T21:33:00.803Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupTestRole", "resourceArn": "arn:aws:service:us-west-2:1112233445566:resource-type/resource-id", "resourceType": "type", "state": "ABORTED", "statusMessage": "\"Backup job was stopped by user.\"", "completionDate": "2020-07-15T21:33:01.621Z", "startBy": "2020-07-16T05:33:00.803Z", "percentDone": 0 } } ``` ### 状态：EXPIRED ``` { "version": "0", "id": "1d7bbc04-6120-1145-13b9-49b0af465328", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T13:04:57Z", "region": "us-west-2", "resources": [], "detail": { "backupJobId": "01EE26DC-7107-4D8E-0C54-EAC27C662BA4", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:aws/backup/AutomatedBackupVaultDel2", "backupVaultName": "aws/backup/AutomatedBackupVaultDel2", "bytesTransferred": "0", "creationDate": "2020-07-29T05:10:20.077Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupTestRole", "resourceArn": "arn:aws:service:us-west-2:1112233445566:resource-type/resource-id", "resourceType": "type", "state": "EXPIRED", "statusMessage": "\"Backup job failed because there was a running job for the same resource.\"", "completionDate": "2020-07-29T13:02:15.234Z", "startBy": "2020-07-29T13:00:00Z", "percentDone": 0, "createdBy": { "backupPlanId": "aws/efs/414a5bd4-f880-47ad-95f3-f085108a4c3b", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:aws/efs/414a5bd4-f880-47ad-95f3-f085108a4c3b", "backupPlanVersion": "NjBjOTUzZjYtYzZiNi00NjhlLWIzMTEtNWRjOWY0YTNjN2Vj", "backupPlanRuleId": "3eb0017c-f262-4211-a802-302cebb11dc2" } } } ``` ### 状态：PENDING ``` { "version": "0", "id": "64dd1897-f863-31a3-9ee5-b05e306d81ff", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T20:03:30Z", "region": "us-west-2", "resources": [], "detail": { "backupJobId": "2cffdb68-d6ed-485f-9f9b-8b530749f1c2", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:ed1f2661-5587-48bf-8a98-fadb977bf975", "backupVaultName": "ed1f2661-5587-48bf-8a98-fadb977bf975", "bytesTransferred": "0", "creationDate": "2020-07-29T20:01:06.224Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupTestRole", "resourceArn": "arn:aws:service:us-west-2:1112233445566:resource-type/resource-id", "resourceType": "type", "state": "PENDING", "statusMessage": "", "startBy": "2020-07-30T04:01:06.224Z", "percentDone": 0 } } ``` ### 状态：CREATED ``` { "version": "0", "id": "29af2bf2-eace-58ab-da3a-8c0bf738d692", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-22T20:32:53Z", "region": "us-west-2", "resources": [], "detail": { "backupJobId": "7e8845b5-ca30-415f-a842-e0152bf4d0ca", "state": "CREATED", "creationDate": "2020-06-22T20:32:47.466Z" } } ``` ## 备份计划事件 以下是示例事件。 **Topics** + [MODIFIED](#backup-plan-state-change-modified) + [DELETED](#backup-plan-state-change-deleted) + [CREATED](#backup-plan-state-change-created) ### 状态：MODIFIED ``` { "version": "0", "id": "2895aefb-dd4a-0a23-6071-2652abd92c3f", "detail-type": "Backup Plan State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T23:18:25Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-plan:83fcb8ee-2d93-42ac-b06f-591563f3f8de" ], "detail": { "backupPlanId": "83fcb8ee-2d93-42ac-b06f-591563f3f8de", "versionId": "NjIwNDFjMDEtNmZlNC00M2JmLTkzZDgtNzNkZjQyNzkxNDk0", "modifiedAt": "2020-06-24T23:18:19.168Z", "state": "MODIFIED" } } ``` ### 状态：DELETED ``` { "version": "0", "id": "33fc5c1d-6db2-b3d9-1e70-1c9a2c23645c", "detail-type": "Backup Plan State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T23:18:25Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-plan:83fcb8ee-2d93-42ac-b06f-591563f3f8de" ], "detail": { "backupPlanId": "83fcb8ee-2d93-42ac-b06f-591563f3f8de", "versionId": "NjIwNDFjMDEtNmZlNC00M2JmLTkzZDgtNzNkZjQyNzkxNDk0", "deletionDate": "2020-06-24T23:18:19.411Z", "state": "DELETED" } } ``` ### 状态：CREATED ``` { "version": "0", "id": "b64fb2d0-ae16-ff9a-faf6-0bdd0d4bfdef", "detail-type": "Backup Plan State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T23:18:19Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-plan:2c103c5f-6d6e-4cac-9147-d3afa4c84f59" ], "detail": { "backupPlanId": "2c103c5f-6d6e-4cac-9147-d3afa4c84f59", "versionId": "N2Q4OTczMzEtZmY1My00N2UwLWE3ODUtMjViYWYyOTUzZWY4", "creationDate": "2020-06-24T23:18:15.318Z", "state": "CREATED" } } ``` ## 备份保管库事件 以下是示例事件。 **Topics** + [CREATED](#backup-vault-state-change-created) + [MODIFIED](#backup-vault-state-change-modified) + [DELETED](#backup-vault-state-change-deleted) ### 状态：CREATED ``` { "version": "0", "id": "d415609e-5f35-d9a2-76d1-613683e4e024", "detail-type": "Backup Vault State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T23:18:19Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-vault:d8864642-155c-4283-a168-a04f40e12c97" ], "detail": { "backupVaultName": "d8864642-155c-4283-a168-a04f40e12c97", "state": "CREATED" } } ``` ### 状态：MODIFIED ``` { "version": "0", "id": "1a2b3cd4-5e6f-7g8h-9i0j-123456k7l890", "detail-type": "Backup Vault State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T23:18:19Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-vault:nameOfTestBackup" ], "detail": { "backupVaultName": "vaultName", "state": "MODIFIED", "isLocked": "true" } } ``` ### 状态：DELETED ``` { "version": "0", "id": "344bccc1-6d2e-da93-3adf-b3f82460294d", "detail-type": "Backup Vault State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-22T02:42:37Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-vault:e8189629-1f8e-4ed2-af7d-b32415d04db1" ], "detail": { "backupVaultName": "e8189629-1f8e-4ed2-af7d-b32415d04db1", "state": "DELETED" } } ``` ## 复制作业事件 以下是示例事件。 **Topics** + [FAILED](#copy-job-state-change-failed) + [RUNNING](#copy-job-state-change-running) + [COMPLETED](#copy-job-state-change-completed) + [CREATED](#copy-job-state-change-created) ### 状态：FAILED ``` { "version": "0", "id": "4660bc92-a44d-c939-4542-cda503f14855", "detail-type": "Copy Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T20:37:34Z", "region": "us-west-2", "resources": [ "arn:aws:ec2:us-west-2::image/ami-00179b33a7a88cac5" ], "detail": { "copyJobId": "47C8EF56-74D8-059D-1301-C5BE1D5C926E", "backupSizeInBytes": 22548578304, "creationDate": "2020-07-15T20:36:13.239Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RoleForEc2BackupWithNoDescribeTagsPermissions", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:instance/i-0515aee7de03f58e1", "resourceType": "EC2", "sourceBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:55aa945e-c46a-421b-aa27-f94b074e31b7", "state": "FAILED", "statusMessage": "Access denied exception while trying to list tags", "completionDate": "2020-07-15T20:37:28.704Z", "destinationBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:55aa945e-c46a-421b-aa27-f94b074e31b7", "destinationRecoveryPointArn": {} } } ``` ### 状态：RUNNING ``` { "version": "0", "id": "d17480ae-7042-edb2-0ff5-8b94822c58e4", "detail-type": "Copy Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T22:07:48Z", "region": "us-west-2", "resources": [ "arn:aws:ec2:us-west-2::snapshot/snap-03886bc8d6ef3a1f9" ], "detail": { "copyJobId": "0175DE71-5784-589F-D8AC-541ACCB4CAC8", "backupSizeInBytes": 3221225472, "creationDate": "2020-07-15T22:06:27.234Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/OrganizationCanaryTestRole", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:volume/vol-050eba21ee4d3c001", "resourceType": "EBS", "sourceBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:846869de-4589-45c3-ab60-4fbbabcdd3ec", "state": "RUNNING", "destinationBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:846869de-4589-45c3-ab60-4fbbabcdd3ec", "destinationRecoveryPointArn": {}, "createdBy": { "backupPlanId": "b58e3621-1c53-4997-ad8a-afc3347a850e", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:b58e3621-1c53-4997-ad8a-afc3347a850e", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupPlanRuleId": "78e356d3-1a11-4f61-8585-af5d6b69bb18" } } } ``` ### 状态：COMPLETED ``` { "version": "0", "id": "47deb974-6473-aef1-56c2-52c3eaedfceb", "detail-type": "Copy Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T22:08:04Z", "region": "us-west-2", "resources": [ "arn:aws:ec2:us-west-2::snapshot/snap-03886bc8d6ef3a1f9" ], "detail": { "copyJobId": "0175DE71-5784-589F-D8AC-541ACCB4CAC8", "backupSizeInBytes": 3221225472, "creationDate": "2020-07-15T22:06:27.234Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/OrganizationCanaryTestRole", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:volume/vol-050eba21ee4d3c001", "resourceType": "EBS", "sourceBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:846869de-4589-45c3-ab60-4fbbabcdd3ec", "state": "COMPLETED", "completionDate": "2020-07-15T22:07:58.111Z", "destinationBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:846869de-4589-45c3-ab60-4fbbabcdd3ec", "destinationRecoveryPointArn": "arn:aws:ec2:us-west-2::snapshot/snap-0726fe70935586180", "createdBy": { "backupPlanId": "b58e3621-1c53-4997-ad8a-afc3347a850e", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:b58e3621-1c53-4997-ad8a-afc3347a850e", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupPlanRuleId": "78e356d3-1a11-4f61-8585-af5d6b69bb18" } } } ``` ### 状态：CREATED ``` { "version": "0", "id": "8398a4c4-8fe8-2b49-a4b9-fd4fdcd34a4e", "detail-type": "Copy Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-22T21:06:32Z", "region": "us-west-2", "resources": [ "arn:aws:ec2:us-west-2::image/ami-0888b126e2170b98e" ], "detail": { "creationDate": "2020-06-22T21:06:25.754Z", "state": "CREATED", "sourceBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:ef09da5a-21a6-461f-a98f-857e9e621a17", "destinationBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:ef09da5a-21a6-461f-a98f-857e9e621a17" } } ``` ## 恢复点事件 以下是事件。 **州** + [COMPLETED](#recovery-point-state-change-completed) + PARTIAL + DELETING + EXPIRED + AVAILABLE + STOPPED + CREATING ### 状态：COMPLETED ``` { "version": "0", "id": "ab32977c-378d-2122-e985-fgh4596f0709", "detail-type": "Recovery Point State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T21:39:07Z", "region": "us-west-2", "resources": [ "arn:aws:rds:us-west-2:1112233445566:cluster-snapshot:awsbackup:job-4ece7121-d60e-00c2-5c3b-49960142d03b" ], "detail": { "backupVaultName": "e6625738-0655-4aa9-bd37-6ec1dd183b15", "backupVaultArn": "arn:aws:backup:us-west-2:496821122410:backup-vault:e6625738-0655-4aa9-bd37-6ec1dd183b15", "creationDate": "2020-07-15T21:38:31.152Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/FullBackupTestRole", "resourceType": "Aurora", "resourceArn": "arn:aws:rds:us-west-2:1112233445566:cluster:id", "status": "COMPLETED", "isEncrypted": "false", "storageClass": "WARM", "completionDate": "2020-07-15T21:39:05.689Z", "createdBy": { "backupPlanId": "bde0f455-4e24-4668-aeaa-4932a97f5cc5", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:bde0f455-4e24-4668-aeaa-4932a97f5cc5", "backupPlanVersion": "YTkzNmM0MmUtMWRhNS00Y2RkLThmZGUtNjA5NTc4NGM1YTc5", "backupPlanRuleId": "1f97bafa-14d6-4f39-94fd-94b51bd6d0d5" }, "lifecycle": { "deleteAfterDays": 100 }, "calculatedLifeCycle": { "deleteAt": "2020-10-23T21:38:31.152Z" } } } ``` ## 区域设置事件 以下是示例事件。 ``` { "version": "0", "id": "e7ed82ba-4955-4de5-10d6-dbafcfb68b4f", "detail-type": "Region Setting State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T22:55:03Z", "region": "us-west-2", "resources": [], "detail": { "modifiedAt": "2020-06-24T22:54:57.161Z", "ResourceTypeOptInPreference": { "Aurora": true }, "state": "MODIFIED" } } ``` ## 还原作业事件 以下是示例事件。请注意，还原作业的使用案例将决定要包含的必需参数和可选参数。例如，如果还原作业是还原测试计划的一部分，则会包含参数 `restoreTestingPlanArn`。可能的参数请参阅 `DescribeRestoreJob`。 **Topics** + [FAILED](#restore-job-state-change-failed) + [RUNNING](#restore-job-state-change-running) + [COMPLETED](#restore-job-state-change-completed) + [PENDING](#restore-job-state-change-pending) + [CREATED](#restore-job-state-change-created) ### 状态：FAILED ``` { "version": "0", "id": "ab32977c-378d-2122-e985-fgh4596f0709", "detail-type": "Restore Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T20:19:29Z", "region": "us-west-2", "resources": [ "arn:aws:ec2:us-west-2::image/ami-12b3456dfb7f8cf90" ], "detail": { "restoreJobId": "1B234A56-789B-01CD-2A34-4567A08901FD", "backupSizeInBytes": "22548578304", "creationDate": "2020-07-15T20:19:07.303Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/TestAWSBackupRole", "percentDone": 0, "resourceType": "EC2", "status": "FAILED", "statusMessage": "AWS Backup does not permit attaching a new instance profile to an EC2 instance. Please restore using the backed up instance profile." } } ``` ### 状态：RUNNING ``` { "version": "0", "id": "ab32977c-378d-2122-e985-fgh4596f0709", "detail-type": "Restore Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T20:26:06Z", "region": "us-west-2", "resources": [ "arn:aws:ec2:us-west-2::snapshot/snap-0fe123ca456cfad7c" ], "detail": { "restoreJobId": "1B234A56-789B-01CD-2A34-4567A08901FD", "backupSizeInBytes": "3221225472", "creationDate": "2020-07-29T20:26:00.098Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RestoreTestRole", "percentDone": 0, "resourceType": "EBS", "status": "RUNNING" } } ``` ### 状态：COMPLETED ``` { "version":"0", "id":"ab32977c-378d-2122-e985-fgh4596f0709", "detail-type":"Restore Job State Change", "source":"aws.backup", "account":"1112233445566", "time":"2020-07-15T03:14:58Z", "region":"us-west-2", "resources":[ "arn:aws:rds:us-west-2:1112233445566:snapshot:awsbackup:job-1a2bcd34-567e-8901-23f4-5g6hijkl7890" ], "detail":{ "restoreJobId":"AB123456-78C9-0123-456D-789012E34567", "backupVaultArn":"arn:aws:backup:us-west-2:1112233445566:backup-vault:ExampleVault", "recoveryPointArn":"arn:aws:backup:us-west-2:1112233445566:recovery-point:6f7fc1f8-2f2e-40ac-943b-8f8efa9ba99d", "sourceResourceArn":"arn:aws:rds:us-west-2:1112233445566:db:example-database", "backupSizeInBytes":"0", "creationDate":"2020-07-15T03:10:01.742Z", "iamRoleArn":"arn:aws:iam::1112233445566:role/RestoreTestRole", "percentDone":0, "resourceType":"RDS", "status":"COMPLETED", "createdResourceArn":"arn:aws:rds:us-west-2:1112233445566:db:testinginstance1a2bcd34-567e-8901-23f4-5g6hijkl7890", "completionDate":"2020-07-15T03:14:53.128Z" } } ``` ### 状态：PENDING ``` { "version": "0", "id": "ab32977c-378d-2122-e985-fgh4596f0709", "detail-type": "Restore Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T20:08:26Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:42bb8260-92cd-46a2-ab8d-b29f4edb47b1" ], "detail": { "restoreJobId": "123EA45F-C678-EFE9-0123-4D56FC0E789A", "backupSizeInBytes": "36048", "creationDate": "2020-07-29T20:08:21.083Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RestoreTestRole", "percentDone": 0, "resourceType": "EC2", "status": "PENDING" } } ``` ### 状态：CREATED ``` { "version": "0", "id": "ab32977c-378d-2122-e985-fgh4596f0709", "detail-type": "Restore Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-22T18:50:49Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:a6560b33-3660-494c-8d47-efgh939ij32k" ], "detail": { "restoreJobId": "123EA45F-C678-EFE9-0123-4D56FC0E789A", "creationDate": "2020-06-22T18:50:46.407Z", "state": "CREATED" } } ``` ## 恢复点索引事件 以下是示例事件。 **Topics** + [ACTIVE](#recovery-point-indexing-active) + [DELETED](#recovery-point-indexing-deleted) + [FAILED](#recovery-point-indexing-failed) ### 状态：ACTIVE ``` { "version":"0", "id":"ab32977c-378d-2122-e985-fgh4596f0709", "detail-type":"Recovery Point Index State Change", "source":"aws.backup", "account":"1112233445566", "time":"2023-12-15T21:39:07Z", "region":"us-west-2", "resources":[ "arn":"aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456" ], "detail":{ "recoveryPointArn":"arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "accountId":"1112233445566", "indexStatus":"ACTIVE", "iamRoleArn":"arn:aws:iam::1112233445566:role/BackupIndexRole", "resourceType":"EBS", "backupVaultArn":"arn:aws:cryo:us-west-2:1112233445566:pod/backup-pod-12345", "indexCreationTime":"2025-05-25T21:38:31.152Z", "isIndexingContinuous":false, "sourceResourceArn":"arn:aws:ec2:us-west-2:1112233445566:volume/vol-01234567890abcdef", "backupCreationTime":"2023-12-15T21:38:00.000Z", "indexStatusMessage":"An AWS Backup recovery point index was successfully completed. Indexed recovery point arn : arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "indexCompletionTime":"2025-05-25T21:39:05.689Z", } } ``` ### 状态：DELETED ``` { "version":"0", "id":"ab32977c-378d-2122-e985-fgh4596f0709", "detail-type":"Recovery Point Index State Change", "source":"aws.backup", "account":"1112233445566", "time":"2023-12-15T21:39:07Z", "region":"us-west-2", "resources":[ "arn":"aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456" ], "detail":{ "recoveryPointArn":"arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "accountId":"1112233445566", "indexStatus":"DELETED", "iamRoleArn":"arn:aws:iam::1112233445566:role/BackupIndexRole", "resourceType":"EBS", "backupVaultArn":"arn:aws:cryo:us-west-2:1112233445566:pod/backup-pod-12345", "indexCreationTime":"2025-05-25T21:38:31.152Z", "isIndexingContinuous":false, "sourceResourceArn":"arn:aws:ec2:us-west-2:1112233445566:volume/vol-01234567890abcdef", "backupCreationTime":"2023-12-15T21:38:00.000Z", "indexStatusMessage":"An AWS Backup recovery point index was deleted. Indexed recovery point arn : arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "indexDeletionTime":"2025-05-27T22:39:05.689Z", } } ``` ### 状态：FAILED ``` { "version":"0", "id":"ab32977c-378d-2122-e985-fgh4596f0709", "detail-type":"Recovery Point Index State Change", "source":"aws.backup", "account":"1112233445566", "time":"2023-12-15T21:39:07Z", "region":"us-west-2", "resources":[ "arn":"aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456" ], "detail":{ "recoveryPointArn":"arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "accountId":"1112233445566", "indexStatus":"FAILED", "iamRoleArn":"arn:aws:iam::1112233445566:role/BackupIndexRole", "resourceType":"EBS", "backupVaultArn":"arn:aws:cryo:us-west-2:1112233445566:pod/backup-pod-12345", "indexCreationTime":"2025-05-25T21:38:31.152Z", "isIndexingContinuous":false, "sourceResourceArn":"arn:aws:ec2:us-west-2:1112233445566:volume/01234567890abcdef", "backupCreationTime":"2023-12-15T21:38:00.000Z", "indexStatusMessage":"An AWS Backup recovery point index failed to create. Indexed recovery point arn : arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", } } ``` ## 恶意软件扫描 Job 事件 以下是示例事件。 **Topics** + [CREATED](#malware-scan-job-state-change-created) + [RUNNING](#malware-scan-job-state-change-running) + [COMPLETED](#malware-scan-job-state-change-completed) + [已完成，但有问题](#malware-scan-job-state-change-completed-with-issues) + [FAILED](#malware-scan-job-state-change-failed) + [CANCELED](#malware-scan-job-state-change-canceled) ### 状态：CREATED ``` { "version": "0", "id": "60ce181d-67c7-496b-90fb-69636b42daee", "detail-type": "Scan Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2025-12-12T12:12:12Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456" ], "detail": { "accountId": "1112233445566", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86", "backupVaultName": "9ab3e749-82c6-4342-9320-5edbf4918b86", "createdBy": { "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanId": "5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupRuleId": "256ad167-f523-4cb9-93f3-f0c933efd97f" }, "creationDate": "2025-12-12T12:12:00Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RoleForEc2BackupWithNoDescribeTagsPermissions", "scannerRoleArn": "arn:aws:iam::1112233445566:role/RoleForAwsBackupGuarddutyScanner", "recoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:instance/i-0515aee7de03f58e1", "resourceType": "EC2", "scanId": "43bc14a6-03e0-436a-abf5-8825d3aa6835", "scanJobId": "4d5fc12e-7e33-4336-a981-bbe43c300298", "scanBaseRecoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:46bd3edb-a499-4db1-8f8f-269a2ff76fab", "malwareScanner": "GUARDDUTY", "state": "CREATED" } } ``` ### 状态：RUNNING ``` { "version": "0", "id": "60ce181d-67c7-496b-90fb-69636b42daee", "detail-type": "Scan Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2025-12-12T12:12:12Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456" ], "detail": { "accountId": "1112233445566", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86", "backupVaultName": "9ab3e749-82c6-4342-9320-5edbf4918b86", "createdBy": { "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanId": "5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupRuleId": "256ad167-f523-4cb9-93f3-f0c933efd97f" }, "creationDate": "2025-12-12T12:12:00Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RoleForEc2BackupWithNoDescribeTagsPermissions", "scannerRoleArn": "arn:aws:iam::1112233445566:role/RoleForAwsBackupGuarddutyScanner", "recoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:instance/i-0515aee7de03f58e1", "resourceType": "EC2", "scanId": "43bc14a6-03e0-436a-abf5-8825d3aa6835", "scanJobId": "4d5fc12e-7e33-4336-a981-bbe43c300298", "scanBaseRecoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:46bd3edb-a499-4db1-8f8f-269a2ff76fab", "malwareScanner": "GUARDDUTY", "state": "RUNNING" } } ``` ### 状态：COMPLETED ``` { "version": "0", "id": "60ce181d-67c7-496b-90fb-69636b42daee", "detail-type": "Scan Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2025-12-12T12:12:12Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456" ], "detail": { "accountId": "1112233445566", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86", "backupVaultName": "9ab3e749-82c6-4342-9320-5edbf4918b86", "completionDate": "2025-12-12T12:12:12Z", "createdBy": { "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanId": "5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupRuleId": "256ad167-f523-4cb9-93f3-f0c933efd97f" }, "creationDate": "2025-12-12T12:12:00Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RoleForEc2BackupWithNoDescribeTagsPermissions", "scannerRoleArn": "arn:aws:iam::1112233445566:role/RoleForAwsBackupGuarddutyScanner", "recoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:instance/i-0515aee7de03f58e1", "resourceType": "EC2", "scanId": "43bc14a6-03e0-436a-abf5-8825d3aa6835", "scanJobId": "4d5fc12e-7e33-4336-a981-bbe43c300298", "scanBaseRecoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:46bd3edb-a499-4db1-8f8f-269a2ff76fab", "malwareScanner": "GUARDDUTY", "scanResult": { "scanResultStatus": "THREATS_FOUND" }, "state": "COMPLETED", "statusMessage": "An AWS Backup scan job was successful completed." } } ``` ### 状态：已完成，但存在问题 ``` { "version": "0", "id": "60ce181d-67c7-496b-90fb-69636b42daee", "detail-type": "Scan Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2025-12-12T12:12:12Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456" ], "detail": { "accountId": "1112233445566", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86", "backupVaultName": "9ab3e749-82c6-4342-9320-5edbf4918b86", "completionDate": "2025-12-12T12:12:12Z", "createdBy": { "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanId": "5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupRuleId": "256ad167-f523-4cb9-93f3-f0c933efd97f" }, "creationDate": "2025-12-12T12:12:00Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RoleForEc2BackupWithNoDescribeTagsPermissions", "scannerRoleArn": "arn:aws:iam::1112233445566:role/RoleForAwsBackupGuarddutyScanner", "recoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:instance/i-0515aee7de03f58e1", "resourceType": "EC2", "scanId": "43bc14a6-03e0-436a-abf5-8825d3aa6835", "scanJobId": "4d5fc12e-7e33-4336-a981-bbe43c300298", "scanBaseRecoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:46bd3edb-a499-4db1-8f8f-269a2ff76fab", "malwareScanner": "GUARDDUTY", "scanResult": { "scanResultStatus": "NO_THREATS_FOUND" }, "state": "COMPLETED_WITH_ISSUES", "statusMessage": "Scan job partially completed. View more details in Amazon GuardDuty" } } ``` ### 状态：FAILED ``` { "version": "0", "id": "60ce181d-67c7-496b-90fb-69636b42daee", "detail-type": "Scan Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2025-12-12T12:12:12Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456" ], "detail": { "accountId": "1112233445566", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86", "backupVaultName": "9ab3e749-82c6-4342-9320-5edbf4918b86", "completionDate": "2025-12-12T12:12:12Z", "createdBy": { "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanId": "5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupRuleId": "256ad167-f523-4cb9-93f3-f0c933efd97f" }, "creationDate": "2025-12-12T12:12:00Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RoleForEc2BackupWithNoDescribeTagsPermissions", "scannerRoleArn": "arn:aws:iam::1112233445566:role/RoleForAwsBackupGuarddutyScanner", "recoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:instance/i-0515aee7de03f58e1", "resourceType": "EC2", "scanId": "43bc14a6-03e0-436a-abf5-8825d3aa6835", "scanJobId": "4d5fc12e-7e33-4336-a981-bbe43c300298", "scanBaseRecoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:46bd3edb-a499-4db1-8f8f-269a2ff76fab", "malwareScanner": "GUARDDUTY", "state": "FAILED", "statusMessage": "" } } ``` ### 状态：已取消 ``` { "version": "0", "id": "60ce181d-67c7-496b-90fb-69636b42daee", "detail-type": "Scan Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2025-12-12T12:12:12Z", "region": "us-west-2", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456" ], "detail": { "accountId": "1112233445566", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86", "backupVaultName": "9ab3e749-82c6-4342-9320-5edbf4918b86", "completionDate": "2025-12-12T12:12:12Z", "createdBy": { "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanId": "5d5a14cc-4ee2-4b9f-beb6-4afa998bb98f", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupRuleId": "256ad167-f523-4cb9-93f3-f0c933efd97f" }, "creationDate": "2025-12-12T12:12:00Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RoleForEc2BackupWithNoDescribeTagsPermissions", "scannerRoleArn": "arn:aws:iam::1112233445566:role/RoleForAwsBackupGuarddutyScanner", "recoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:instance/i-0515aee7de03f58e1", "resourceType": "EC2", "scanId": "43bc14a6-03e0-436a-abf5-8825d3aa6835", "scanJobId": "4d5fc12e-7e33-4336-a981-bbe43c300298", "scanBaseRecoveryPointArn": "arn:aws:backup:us-west-2:1112233445566:recovery-point:46bd3edb-a499-4db1-8f8f-269a2ff76fab", "malwareScanner": "GUARDDUTY", "state": "CANCELED", "statusMessage": "Scan job was stopped by user." } } ``` # AWS Backup Amazon 的指标 CloudWatch **Topics** + [CloudWatch 仪表板](#cloudwatch-dashboard) + [指标与 CloudWatch](#monitoring-metrics-with-cloudwatch) ## CloudWatch 仪表板 **注意** 控制台控制面板因访问控制台的区域而异。如需查看哪些区域有权访问作业控制面板，请参阅[功能可用性来自 AWS 区域](backup-feature-availability.md#features-by-region)。未列出的地区将能够访问 CloudWatch控制面板。 您的 AWS Backup 控制台包括一个仪表板，用于查看已完成或失败的备份、复制和还原任务的指标。在此控制面板中，您可以按时间段查看作业状态，并根据所需的时间范围进行自定义。 **访问控制面板** 1. 在 [https://console.aws.amazon.com/backup](https://console.aws.amazon.com/backup) 上打开 AWS Backup 控制台。 1. 在左侧导航窗格中，选择**控制面板**。 **查看和理解控制面板** CloudWatch 仪表板显示多个小部件。每个小部件按计数显示作业指标。每个小部件显示多个折线图。每行对应一个受保护的资源（如果您没有看到显示的预期资源，请确保在**设置**中启用了该资源）。显示屏不显示正在进行的作业。 y 轴（垂直值）显示计数。x 轴（水平值）显示时间点。如果在所选作业状态下没有可视化的数据点，该值将设置为 0，x 轴上有一条水平线。显示资源的图例仍然可见。 这些指标显示与当前登录相关的账户特定和区域特定信息。要查看其他账户或区域，您必须使用所选账户登录。 **自定义控制面板** 默认情况下，显示的时间范围为一周。顶部菜单会显示多个用于重新定义所显示时间范围的选项。您可以从 1 小时、3 小时、12 小时、1 天、3 天和 1 周中进行选择。此外，您可以选择**自定义**来指定不同的值。自定义会暂时将当前视图更改为您的规格。 您可以将鼠标指针悬停在小部件上，该小部件的右上角会显示**放大**按钮。单击**放大**，以全屏视图打开小部件。在全屏模式下，会显示更多用于自定义图表显示的选项，例如更改时段（每个数据点之间的时间）。关闭全屏视图后，任何更改都不会保留。 要一次仅查看一种资源类型，请在图表图例中单击要查看的资源类型的标签文本。这将取消选择其他所有资源类型。要反向执行该操作，请单击图例中的资源类型颜色框。要返回所有资源类型的默认视图，并选中所有标签，请再次单击所选任何资源类型的标签文本。 单击小部件右上角的三个垂直圆点会打开一个下拉菜单，其中包含用于刷新、放大、在指标中查看和在日志中查看的选项。“在指标中查看” 会在 CloudWatch 控制台中打开控件中使用的指标。您可以在此处对控件进行任何更改，然后将该小组件添加到仪表板中的自定义仪表 CloudWatch 板中。您在 CloudWatch 控制面板中所做的任何更改都不会反映在 AWS Backup 控制台的控制面板上。“以日志形式查看” 将在 CloudWatch 控制台中打开日志查看页面。 要将显示的微件添加到您自己的自定义 CloudWatch 仪表板，请单击**仪表板右上角的 “添加到**控制面板” 按钮。这将打开 CloudWatch 控制台，您可以在其中选择在哪个自定义仪表板中添加所有六个小部件。 有关更多信息，请参阅[使用 Amazon CloudWatch 指标](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/working_with_metrics.html)。 ## 指标与 CloudWatch 您可以使用 CloudWatch 来监控 AWS Backup 指标。`AWS/Backup`命名空间允许您跟踪以下指标。 AWS Backup CloudWatch 每隔 5 分钟发布一次更新的指标。 本文档页面的目的是为您提供用于监控 CloudWatch 的参考资料 AWS Backup。要了解如何使用监控指标 CloudWatch，请参阅博客 [Amazon CloudWatch 事件和指标 AWS Backup](https://aws.amazon.com/blogs/storage/amazon-cloudwatch-events-and-metrics-for-aws-backup/)或*CloudWatch 用户指南*[中的关注单项 AWS 服务中的指标和警报](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Automatic_Dashboards_Focus_Service.html)。要设置警报，请参阅*CloudWatch 用户指南*中的[使用 Amazon CloudWatch 警报](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html)。 | 类别 | 指标 | 示例维度 | 使用案例示例 | | --- | --- | --- | --- | | 作业 | 每种状态下的备份、还原和复制作业数量，包括 `CREATED`、`PENDING`、`RUNNING`、`ABORTED`、`COMPLETED`、`FAILED` 和 `EXPIRED`。 不同的作业类型有不同的可用状态。 | 资源类型、保管库名称。复制作业的保管库名称就是其目的地保管库的名称。 | 监控一个或多个特定备份保管库中失败的备份作业数量。如果在 1 小时内有超过五个失败的作业，请使用 Amazon SNS 发送电子邮件或短信，或者向工程团队提交工单进行调查。 **报告标准**：有非零值 | | 恢复点 | 每个状态下的热恢复点和冷恢复点数量：MODIFIED、COMPLETED、PARTIAL、EXPIRED、DELETED。 | 资源类型、保管库名称。 | 跟踪您的 Amazon EBS 卷中已删除的恢复点数量，并分别跟踪每个备份保管库中的热恢复点和冷恢复点的数量。 **报告标准**：有非零值 | **注意** 的任务状态`Completed with issues`仅限于 AWS Backup 控制台；无法通过进行跟踪 CloudWatch。 下表列出了您可使用的所有指标。 | 指标 | 说明 | | --- | --- | | NumberOfBackupJobsCreated | AWS Backup 创建的备份任务数量。 | | NumberOfBackupJobsPending | 即将在 AWS Backup中运行的备份作业数量。 | | NumberOfBackupJobsRunning | 当前正在运行的备份任务数量 AWS Backup。 | | NumberOfBackupJobsAborted | 用户取消的备份作业数量。 | | NumberOfBackupJobsCompleted | 已 AWS Backup 完成的备份任务数。 | | NumberOfBackupJobsFailed | 状态为 Failed 的备份作业数量。通常是由于将备份任务安排在数据库资源之前或之前 1 小时，或者在 Amazon FSx 维护时段或自动备份时段之前或期间 4 小时内安排备份作业，并且不使用执行连续备份 AWS Backup 以进行 point-in-time恢复。有关支持的服务列表以及如何使用 AWS Backup 连续备份或重新安排备份任务的说明，请参阅[Point-in-Time 恢复](https://docs.aws.amazon.com/aws-backup/latest/devguide/point-in-time-recovery.html)。 | | NumberOfBackupJobsExpired | 状态为 `EXPIRED` 的备份作业数。 如果无法在启动时段内开始备份，备份作业的状态将从 `CREATED` 更改为 `EXPIRED`。 | | NumberOfCopyJobsCreated | AWS Backup 创建的跨账户和跨区域复制作业的数量。 | | NumberOfCopyJobsRunning | 当前正在 AWS Backup中运行的跨账户和跨区域复制作业的数量。 | | NumberOfCopyJobsCompleted | AWS Backup 完成的跨账户和跨区域复制作业的数量。 | | NumberOfCopyJobsFailed | AWS Backup 尝试但无法完成的跨账户和跨区域复印任务的数量。 | | NumberOfRestoreJobsPending | 即将在 AWS Backup中运行的还原作业数量。 | | NumberOfRestoreJobsRunning | 当前正在运行的还原任务数量 AWS Backup。 | | NumberOfRestoreJobsCompleted | 已 AWS Backup 完成的还原任务数。 | | NumberOfRestoreJobsFailed | 已 AWS Backup 尝试但无法完成的还原任务的数量。 | | NumberOfRecoveryPointsCompleted | AWS Backup 创建的恢复点的数量。 | | NumberOfRecoveryPointsPartial | 已 AWS Backup 开始创建但无法完成的恢复点的数量。 AWS 稍后会重试该过程，但由于重试是在稍后进行的，因此它会保留部分恢复点。 | | NumberOfRecoveryPointsExpired | 根据您的备份保留生命周期 AWS Backup 尝试删除但无法删除的恢复点数量。您需要为过期备份消耗的存储空间付费，您应该手动将其删除。 | | NumberOfRecoveryPointsDeleting | AWS Backup 正在删除的恢复点数量。 | | NumberOfRecoveryPointsCold | AWS Backup 分层到冷存储的恢复点数量。 | 除了表格中列出的维度之外，还有更多可用维度。要查看指标的所有维度，请在 CloudWatch 控制台的 “**指标” 部分的`AWS/Backup`命名空间中键入该指标**的名称。 # 使用记录 AWS Backup API 调用 CloudTrail AWS Backup 与[AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html)提供用户、角色或服务所执行操作记录的 AWS 服务集成。 CloudTrail 将所有 API 调用捕获 AWS Backup 为事件。捕获的调用包括来自 AWS Backup 控制台的调用和对 AWS Backup API 操作的代码调用。使用收集的信息 CloudTrail，您可以确定向哪个请求发出 AWS Backup、发出请求的 IP 地址、发出请求的时间以及其他详细信息。 每个事件或日志条目都包含有关生成请求的人员信息。身份信息有助于您确定以下内容： + 请求是使用根用户凭证还是用户凭证发出的。 + 请求是否代表 IAM Identity Center 用户发出。 + 请求是使用角色还是联合用户的临时安全凭证发出的。 + 请求是否由其他 AWS 服务发出。 CloudTrail 在您创建账户 AWS 账户 时在您的账户中处于活动状态，并且您自动可以访问 CloudTrail **活动历史记录**。 CloudTrail **事件历史记录**提供了过去 90 天中记录的管理事件的可查看、可搜索、可下载且不可变的记录。 AWS 区域有关更多信息，请参阅《*AWS CloudTrail 用户指南》*中的 “[使用 CloudTrail 事件历史记录](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/view-cloudtrail-events.html)”。查看**活动历史记录**不 CloudTrail收取任何费用。 要持续记录 AWS 账户 过去 90 天内的事件，请创建跟踪或 [CloudTrailLake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html) 事件数据存储。 **CloudTrail 步道** *跟踪*允许 CloudTrail 将日志文件传输到 Amazon S3 存储桶。使用创建的所有跟踪 AWS 管理控制台 都是多区域的。您可以通过使用 AWS CLI创建单区域或多区域跟踪。建议创建多区域跟踪，因为您可以捕获账户 AWS 区域 中的所有活动。如果您创建单区域跟踪，则只能查看跟踪的 AWS 区域中记录的事件。有关跟踪的更多信息，请参阅《AWS CloudTrail 用户指南》**中的[为您的 AWS 账户创建跟踪](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-create-and-update-a-trail.html)和[为组织创建跟踪](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html)。 通过创建跟踪，您可以免费将正在进行的管理事件的一份副本传送到您的 Amazon S3 存储桶，但会收取 Amazon S3 存储费用。 CloudTrail 有关 CloudTrail 定价的更多信息，请参阅[AWS CloudTrail 定价](https://aws.amazon.com/cloudtrail/pricing/)。有关 Amazon S3 定价的信息，请参阅 [Amazon S3 定价](https://aws.amazon.com/s3/pricing/)。 **CloudTrail 湖泊事件数据存储** CloudTrail L@@ *ak* e 允许你对自己的事件运行基于 SQL 的查询。 CloudTrail Lake 将基于行的 JSON 格式的现有事件转换为 [Apache ORC](https://orc.apache.org/) 格式。ORC 是一种针对快速检索数据进行优化的列式存储格式。事件将被聚合到*事件数据存储*中，它是基于您通过应用[高级事件选择器](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-concepts.html#adv-event-selectors)选择的条件的不可变的事件集合。应用于事件数据存储的选择器用于控制哪些事件持续存在并可供您查询。有关 CloudTrail Lake 的更多信息，请参阅《*AWS CloudTrail 用户指南》*中的 “[使用 AWS CloudTrail Lake](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html)”。 CloudTrail 湖泊事件数据存储和查询会产生费用。创建事件数据存储时，您可以选择要用于事件数据存储的[定价选项](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-manage-costs.html#cloudtrail-lake-manage-costs-pricing-option)。定价选项决定了摄取和存储事件的成本，以及事件数据存储的默认和最长保留期。有关 CloudTrail 定价的更多信息，请参阅[AWS CloudTrail 定价](https://aws.amazon.com/cloudtrail/pricing/)。 ## AWS Backup 中的事件 CloudTrail AWS Backup 在执行备份、恢复、复制、扫描或通知时生成这些 CloudTrail 事件。这些事件不一定是由 AWS Backup 公众使用产生的 APIs。有关更多信息，请参阅《AWS CloudTrail 用户指南》**中的 [AWS 服务事件](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/non-api-aws-service-events.html)。 + `AssociateBackupVaultMpaApprovalTeamCompleted` + `AssociateBackupVaultMpaApprovalTeamFailed` + `BackupDeleted` + `BackupJobCompleted` + `BackupJobStarted` + `BackupSelectionDeletedDueToSLRDeletion` + `BackupTransitionedToCold` + `CopyJobCompleted` + `CopyJobStarted` + `CreateRestoreAccessBackupVaultFailed` + `DisassociateBackupVaultMpaApprovalTeamFailed` + `PutBackupVaultNotifications` + `RecoveryPointCreated` + `ReportJobCompleted` + `ReportJobStarted` + `RestoreAccessBackupVaultDeleted` + `RestoreCompleted` + `RestoreStarted` + `RevokeRestoreAccessBackupVaultFailed` + `ScanJobCompleted` + `ScanJobCreated` + `ScanJobFailed` + `ScanJobStarted` ## 了解 AWS Backup 日志文件条目 跟踪是一种配置，允许将事件作为日志文件传输到您指定的 Amazon S3 存储桶。 CloudTrail 日志文件包含一个或多个日志条目。事件代表来自任何来源的单个请求，包括有关请求的操作、操作的日期和时间、请求参数等的信息。 CloudTrail 日志文件不是公共 API 调用的有序堆栈跟踪，因此它们不会按任何特定的顺序出现。 以下示例显示了一个演示`StartBackupJob`、`StartRestoreJob`、和`DeleteRecoveryPoint`操作以及`BackupJobCompleted`事件的 CloudTrail 日志条目。 ``` { "eventVersion": "1.05", "userIdentity": { "type": "Root", "principalId": "123456789012", "arn": "arn:aws:iam::123456789012:root", "accountId": "123456789012", "accessKeyId": "AKIAI44QH8DHBEXAMPLE", "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2019-01-10T12:24:50Z" } } }, "eventTime": "2019-01-10T13:45:24Z", "eventSource": "backup.amazonaws.com", "eventName": "StartBackupJob", "awsRegion": "us-east-1", "sourceIPAddress": "12.34.567.89", "userAgent": "aws-internal/3 aws-sdk-java/1.11.465 Linux/4.9.124-0.1.ac.198.73.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.192-b12 java/1.8.0_192", "requestParameters": { "backupVaultName": "Default", "resourceArn": "arn:aws:ec2:us-east-1:123456789012:volume/vol-00a422a05b9c6asd3", "iamRoleArn": "arn:aws:iam::123456789012:role/AWSBackup", "startWindowMinutes": 60 }, "responseElements": { "backupJobId": "8a3c2a87-b23e-4d56-b045-fa9e88ede4e6", "creationDate": "Jan 10, 2019 1:45:24 PM" }, "requestID": "98cf4d59-8c76-49f7-9201-790743931234", "eventID": "fe8146a5-7812-4a95-90ad-074498be1234", "eventType": "AwsApiCall", "recipientAccountId": "account-id" }, { "eventVersion": "1.05", "userIdentity": { "type": "Root", "principalId": "123456789012", "arn": "arn:aws:iam::123456789012:root", "accountId": "123456789012", "accessKeyId": "AKIAI44QH8DHBEXAMPLE", "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2019-01-10T12:24:50Z" } } }, "eventTime": "2019-01-10T13:49:50Z", "eventSource": "backup.amazonaws.com", "eventName": "StartRestoreJob", "awsRegion": "us-east-1", "sourceIPAddress": "12.34.567.89", "userAgent": "aws-internal/3 aws-sdk-java/1.11.465 Linux/4.9.124-0.1.ac.198.73.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.192-b12 java/1.8.0_192", "requestParameters": { "recoveryPointArn": "arn:aws:ec2:us-east-1::snapshot/snap-00a129455bdbc9d99", "metadata": { "volumeType": "gp2", "availabilityZone": "us-east-1b", "volumeSize": "100" }, "iamRoleArn": "arn:aws:iam::123456789012:role/AWSBackup", "idempotencyToken": "a9c8b4fb-d369-4a58-944b-942e442a8fe3", "resourceType": "EBS" }, "responseElements": { "restoreJobId": "9808E090-8C76-CCB8-4CEA-407CF6AC4C43" }, "requestID": "783ddddc-6d7e-4539-8fab-376aa9668543", "eventID": "ff35ddea-7577-4aec-a132-964b7e9dd423", "eventType": "AwsApiCall", "recipientAccountId": "account-id" }, { "eventVersion": "1.05", "userIdentity": { "type": "Root", "principalId": "123456789012", "arn": "arn:aws:iam::123456789012:root", "accountId": "123456789012", "accessKeyId": "AKIAI44QH8DHBEXAMPLE", "sessionContext": { "attributes": { "mfaAuthenticated": "false", "creationDate": "2019-01-10T12:24:50Z" } } }, "eventTime": "2019-01-10T14:52:42Z", "eventSource": "backup.amazonaws.com", "eventName": "DeleteRecoveryPoint", "awsRegion": "us-east-1", "sourceIPAddress": "12.34.567.89", "userAgent": "aws-internal/3 aws-sdk-java/1.11.465 Linux/4.9.124-0.1.ac.198.73.329.metal1.x86_64 OpenJDK_64-Bit_Server_VM/25.192-b12 java/1.8.0_192", "requestParameters": { "backupVaultName": "Default", "recoveryPointArn": "arn:aws:ec2:us-east-1::snapshot/snap-05f426fd9daab3433" }, "responseElements": null, "requestID": "f1f1b33a-48da-436c-9a8f-7574f1ab5fd7", "eventID": "2dd70080-5aba-4a79-9a0f-92647c9f0846", "eventType": "AwsApiCall", "recipientAccountId": "account-id" }, { "eventVersion": "1.05", "userIdentity": { "accountId": "123456789012", "invokedBy": "backup.amazonaws.com" }, "eventTime": "2019-01-10T08:24:39Z", "eventSource": "backup.amazonaws.com", "eventName": "BackupJobCompleted", "awsRegion": "us-east-1", "sourceIPAddress": "backup.amazonaws.com", "userAgent": "backup.amazonaws.com", "requestParameters": null, "responseElements": null, "eventID": "2e7e4fcf-0c52-467f-9fd0-f61c2fcf7d17", "eventType": "AwsServiceEvent", "recipientAccountId": "account-id", "serviceEventDetails": { "completionDate": { "seconds": 1547108091, "nanos": 906000000 }, "state": "COMPLETED", "percentDone": 100, "backupJobId": "8A8E738B-A8C5-E058-8224-90FA323A3C0E", "backupVaultName": "BackupVault", "backupVaultArn": "arn:aws:backup:us-east-1:123456789012:backup-vault:BackupVault", "recoveryPointArn": "arn:aws:ec2:us-east-1::snapshot/snap-07ce8c3141d361233", "resourceArn": "arn:aws:ec2:us-east-1:123456789012:volume/vol-06692095a6a421233", "creationDate": { "seconds": 1547101638, "nanos": 272000000 }, "backupSizeInBytes": 8589934592, "iamRoleArn": "arn:aws:iam::123456789012:role/AWSBackup", "resourceType": "EBS" } } ``` ## 记录跨账户管理事件 使用 AWS Backup，您可以管理[AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html)结构 AWS 账户 内所有内容的备份。 AWS Backup 当您创建、更新或删除 AWS Organizations 备份策略（将备份计划应用于您的成员帐户）或存在无效的组织备份计划时，会在您的成员帐户中生成以下 CloudTrail 事件： + `CreateOrganizationalBackupPlan` + `UpdateOrganizationalBackupPlan` + `DeleteOrganizationalBackupPlan` + `InvalidOrganizationBackupPlan` ### 示例：用于跨账户管理的 AWS Backup 日志文件条目 跟踪是一种配置，允许将事件作为日志文件传输到您指定的 Amazon S3 存储桶。 CloudTrail 日志文件包含一个或多个日志条目。事件代表来自任何来源的单个请求，包括有关请求的操作、操作的日期和时间、请求参数等的信息。 CloudTrail 日志文件不是公共 API 调用的有序堆栈跟踪，因此它们不会按任何特定的顺序出现。 以下示例显示了演示该`CreateOrganizationalBackupPlan`操作的 CloudTrail 日志条目。 ``` { "eventVersion": "1.05", "userIdentity": { "accountId": "123456789012", "invokedBy": "backup.amazonaws.com"}, "eventTime": "2020-06-02T00:34:00Z", "eventSource": "backup.amazonaws.com", "eventName": "CreateOrganizationalBackupPlan", "awsRegion": "ca-central-1", "sourceIPAddress": "backup.amazonaws.com", "userAgent": "backup.amazonaws.com", "requestParameters": null, "responseElements": null, "eventID": "f2642255-af77-4203-8c37-7ca19d898e84", "readOnly": false, "eventType": "AwsServiceEvent", "recipientAccountId": "account-id", "serviceEventDetails": { "backupPlanId": "orgs/544033d1-b19c-3f2a-9c20-40bcfa82ca68", "backupPlanVersionId": "ZTA1Y2ZjZDYtNmRjMy00ZTA1LWIyNTAtM2M1NzQ4OThmNzRj", "backupPlanArn": "arn:aws:backup:ca-central-1:123456789012:backup-plan:orgs/544033d1-b19c-3f2a-9c20-40bcfa82ca68", "backupPlanName": "mybackupplan", "backupRules": "[{\"id\":\"745fd0ea-7f57-3f35-8a0e-ed4b8c48a8e2\",\"name\":\"hourly\",\"description\":null,\"cryopodArn\":\"arn:aws:backup:ca-central-1:123456789012:backup-vault:ControllerCAMTestBackupVault\",\"scheduleExpression\":\"cron(0 0/1 ? * * *)\",\"startWindow\":\"PT1H\",\"completionWindow\":\"PT2H\",\"lifecycle\":{\"moveToColdStorageAfterDays\":null,\"deleteAfterDays\":\"7\"},\"tags\":null,\"copyActions\":[]}]", "backupSelections": "[{\"name\":\"selectiondatatype\",\"arn\":\"arn:aws:backup:ca-central-1:123456789012:selection:8b40c6d9-3641-3d49-926d-a075ea715686\",\"role\":\"arn:aws:iam::123456789012:role/OrganizationmyRoleTestRole\",\"resources\":[],\"notResources\":[],\"conditions\":[{\"type\":\"STRINGEQUALS\",\"key\":\"dataType\",\"value\":\"PII\"},{\"type\":\"STRINGEQUALS\",\"key\":\"dataType\",\"value\":\"RED\"}],\"creationDate\":\"2020-06-02T00:34:00.695Z\",\"creatorRequestId\":null}]", "creationDate": { "seconds": 1591058040, "nanos": 695000000 }, "organizationId": "org-id", "accountId": "123456789012" } } ``` 以下示例显示了演示该`DeleteOrganizationalBackupPlan`操作的 CloudTrail 日志条目。 ``` { "eventVersion": "1.05", "userIdentity": { "accountId": "123456789012", "invokedBy": "backup.amazonaws.com" }, "eventTime": "2020-06-02T00:34:25Z", "eventSource": "backup.amazonaws.com", "eventName": "DeleteOrganizationalBackupPlan", "awsRegion": "ca-central-1", "sourceIPAddress": "backup.amazonaws.com", "userAgent": "backup.amazonaws.com", "requestParameters": null, "responseElements": null, "eventID": "5ce66cd0-b90c-4957-8e00-96ea1077b4fa", "readOnly": false, "eventType": "AwsServiceEvent", "recipientAccountId": "account-id", "serviceEventDetails": { "backupPlanId": "orgs/544033d1-b19c-3f2a-9c20-40bcfa82ca68", "backupPlanVersionId": "ZTA1Y2ZjZDYtNmRjMy00ZTA1LWIyNTAtM2M1NzQ4OThmNzRj", "backupPlanArn": "arn:aws:backup:ca-central-1:123456789012:backup-plan:orgs/544033d1-b19c-3f2a-9c20-40bcfa82ca68", "backupPlanName": "mybackupplan", "deletionDate": { "seconds": 1591058065, "nanos": 519000000 }, "organizationId": "org-id", "accountId": "123456789012" } } ``` 以下示例显示了一个演示该事件的 CloudTrail 日志条目`InvalidOrganizationBackupPlan`，该条目是在 AWS Backup 收到来自 Organizations 的无效备份计划时发送的。 ``` { "eventVersion": "1.08", "userIdentity": { "accountId": "123456789012", "invokedBy": "backup.amazonaws.com" }, "eventTime": "2022-06-11T13:29:23Z", "eventSource": "backup.amazonaws.com", "eventName": "InvalidOrganizationBackupPlan", "awsRegion": "Region", "sourceIPAddress": "backup.amazonaws.com", "userAgent": "backup.amazonaws.com", "requestParameters": null, "responseElements": null, "eventID": "ab1de234-fg56-7890-h123-45ij678k9l01", "readOnly": false, "eventType": "AwsServiceEvent", "managementEvent": true, "recipientAccountId": "987654321098", "serviceEventDetails": { "effectivePolicyVersion": 7, "effectivePolicyId": "12345678-a9b0-123c-45d6-78e901f23456", "lastUpdatedTimestamp": "Jun 11, 2022 1:29:22 PM", "policyType": "BACKUP_POLICY", "effectiveBackupPlan": { "logicalName": "logical-name", "regions": [ "Region" ], "rules": [ { "name": "test-orgs", "targetBackupVaultName": "vault-name", "ruleLifecycle": { "deleteAfterDays": 100 }, "copyActions": [], "enableContinuousBackup": true } ], "selections": { "tagSelections": [ { "selectionName": "selection-name", "iamRoleArn": "arn:aws:iam::$account:role/role", "targetedTags": [ { "tagKey": "key", "tagValue": "value" } ] } ] }, "backupPlanTags": { "key": "value" } }, "organizationId": "org-id", "accountId": "123456789012" }, "eventCategory": "Management" } ``` # 带有的通知选项 AWS Backup 有两种方式可以接收有关 AWS Backup以下内容的通知： + 用户通知服务 可以发送通知（包括 Amazon CloudWatch 警报）和其他服务的通知。 AWS 支持 + Amazon 简单通知服务可以将 AWS Backup 事件通知您。 ## 用户通知服务 和 AWS Backup AWS Backup 支持通过[用户通知服务 控制台](https://console.aws.amazon.com//notifications/home?notifications#/notifications)管理备份通知。通过 [用户通知服务](https://docs.aws.amazon.com/notifications/latest/userguide/getting-started.html)，您可以从 User Notifications Notification Center 查看备份、复制和还原作业的进度，以及对备份策略、保管库、恢复点和设置的更改。 您可以通过控制台管理其他类型的通知，包括亚马逊、亚马逊 EventBridge 警报和 AWS 支持 案例更新。 CloudWatch此外，您还可以设置多个配送选项，包括电子邮件、聊天应用程序中的 Amazon Q Developer 通知和 AWS Console Mobile Application 推送通知。 ## 亚马逊 SNS 和活动 AWS Backup AWS Backup 利用了亚马逊简单通知服务 (Amazon SNS) Simple Notification Service 提供的强大通知。您可以将 Amazon SNS 配置为通过亚马逊 SNS 控制台向您通知 AWS Backup 事件。 **限制** + 虽然 Amazon SNS 服务允许跨账户通知， AWS Backup 但目前不支持此功能。您必须指定自己的 AWS 账户 ID 和主题的资源 ARN。 + AWS Backup 支持 SNS 尽力删除重复数据的标准主题，但目前 AWS Backup 不支持用于严格重复数据删除的 SNS FIFO 主题。 ### 常见使用案例 + 按照[如何获取失败任务的通知？中的步骤设置失败的备份 AWS Backup 任务的通知](https://repost.aws/knowledge-center/aws-backup-failed-job-notification) 来自 AWS 高级支持。 + 在下方的事件示例表中，查看已完成、失败和已过期的备份任务的 Amazon SNS 通知 JSONs 示例。 有关一般 Amazon SNS 的更多信息，请参阅《Amazon Simple Notification Service Developer Guide》**中的 [Getting Started with Amazon SNS](https://docs.aws.amazon.com/sns/latest/dg/sns-getting-started.html)。 ### AWS Backup notification APIs 使用 Amazon SNS 控制台或 AWS Command Line Interface (AWS CLI) 创建主题后，您可以使用以下 AWS Backup API 操作来管理备份通知。 + [DeleteBackupVaultNotifications](API_DeleteBackupVaultNotifications.md) - 删除有关指定备份保管库的事件通知。 + [GetBackupVaultNotifications](API_GetBackupVaultNotifications.md) - 列出指定的备份保管库的所有事件通知。 + [PutBackupVaultNotifications](API_PutBackupVaultNotifications.md) - 打开指定主题和事件的通知。 AWS Backup 支持以下事件： | 作业类型 | 事件 | | --- | --- | | 备份作业 | BACKUP\$1JOB\$1STARTED \$1 BACKUP\$1JOB\$1COMPLETED \$1 CONTINUOUS\$1BACKUP\$1INTERRUPTED | | 复制作业 | COPY\$1JOB\$1STARTED \$1 COPY\$1JOB\$1SUCCESSFUL \$1 COPY\$1JOB\$1FAILED | | 还原作业 | RESTORE\$1JOB\$1STARTED \$1 RESTORE\$1JOB\$1COMPLETED | | 恢复点 | RECOVERY\$1POINT\$1MODIFIED | | 恢复点索引 | RECOVERY\$1POINT\$1INDEX\$1COMPLETED \$1 RECOVERY\$1POINT\$1INDEX\$1DELETED \$1 RECOVERY\$1POINT\$1INDEXING\$1FAILED | AWS Backup for S3 支持另外两个事件： + `S3_BACKUP_OBJECT_FAILED` 会通知您在备份作业期间 AWS Backup 未能备份的任何 S3 对象。 + `S3_RESTORE_OBJECT_FAILED` 会通知您在还原作业期间 AWS Backup 未能还原的任何 S3 对象。 AWS Backup for EKS 支持另外三个事件： + `EKS_BACKUP_OBJECT_FAILED`会通知您任何在备份作业期间 AWS Backup 未能备份的 EKS 对象。 + `EKS_RESTORE_OBJECT_FAILED`会通知您在还原作业期间任何 AWS Backup 未能还原的 EKS 对象。 + `EKS_RESTORE_OBJECT_SKIPPED`会通知您恢复作业期间 AWS Backup 跳过的任何 EKS 对象。 ### 事件示例 **Example 示例：已完成的备份作业** ``` { "Records": [{ "EventSource": "aws:sns", "EventVersion": "1.0", "EventSubscriptionArn": "arn:aws:sns:...-a3802aa1ed45", "Sns": { "Type": "Notification", "MessageId": "12345678-abcd-123a-def0-abcd1a234567", "TopicArn": "arn:aws:sns:us-west-1:123456789012:backup-2sqs-sns-topic", "Subject": "Notification from AWS Backup", "Message": "An AWS Backup job was completed successfully. Recovery point ARN: arn:aws:ec2:us-west-1:123456789012:volume/vol-012f345df6789012d. Resource ARN : arn:aws:ec2:us-west-1:123456789012:volume/vol-012f345df6789012e. BackupJob ID : 1b2345b2-f22c-4dab-5eb6-bbc7890ed123", "Timestamp": "2019-08-02T18:46:02.788Z", ... "MessageAttributes": { "EventType": {"Type":"String","Value":"BACKUP_JOB"}, "State": {"Type":"String","Value":"COMPLETED"}, "AccountId": {"Type":"String","Value":"123456789012"}, "Id": {"Type":"String","Value":"1b2345b2-f22c-4dab-5eb6-bbc7890ed123"}, "StartTime": {"Type":"String","Value":"2019-09-02T13:48:52.226Z"} } } }] } ``` **Example 示例：失败的备份作业** ``` { "Records": [{ "EventSource": "aws:sns", "EventVersion": "1.0", "EventSubscriptionArn": "arn:aws:sns:...-a3802aa1ed45", "Sns": { "Type": "Notification", "MessageId": "12345678-abcd-123a-def0-abcd1a234567", "TopicArn": "arn:aws:sns:us-west-1:123456789012:backup-2sqs-sns-topic", "Subject": "Notification from AWS Backup", "Message": "An AWS Backup job failed. Resource ARN : arn:aws:ec2:us-west-1:123456789012:volume/vol-012f345df6789012e. BackupJob ID : 1b2345b2-f22c-4dab-5eb6-bbc7890ed123", "Timestamp": "2019-08-02T18:46:02.788Z", ... "MessageAttributes": { "EventType": {"Type":"String","Value":"BACKUP_JOB"}, "State": {"Type":"String","Value":"FAILED"}, "AccountId": {"Type":"String","Value":"123456789012"}, "Id": {"Type":"String","Value":"1b2345b2-f22c-4dab-5eb6-bbc7890ed123"}, "StartTime": {"Type":"String","Value":"2019-09-02T13:48:52.226Z"} } } }] } ``` **Example 示例：在备份时段内未完成的备份作业** ``` { "Records": [{ "EventSource": "aws:sns", "EventVersion": "1.0", "EventSubscriptionArn": "arn:aws:sns:...-a3802aa1ed45", "Sns": { "Type": "Notification", "MessageId": "12345678-abcd-123a-def0-abcd1a234567", "TopicArn": "arn:aws:sns:us-west-1:123456789012:backup-2sqs-sns-topic", "Subject": "Notification from AWS Backup", "Message": "An AWS Backup job failed to complete in time. Resource ARN : arn:aws:ec2:us-west-1:123456789012:volume/vol-012f345df6789012e. BackupJob ID : 1b2345b2-f22c-4dab-5eb6-bbc7890ed123", "Timestamp": "2019-08-02T18:46:02.788Z", ... "MessageAttributes" : { "EventType" : {"Type":"String","Value":"BACKUP_JOB"}, "State" : {"Type":"String","Value":"EXPIRED"}, "AccountId" : {"Type":"String","Value":"123456789012"}, "Id" : {"Type":"String","Value":"1b2345b2-f22c-4dab-5eb6-bbc7890ed123"}, "StartTime" : {"Type":"String","Value":"2019-09-02T13:48:52.226Z"} } } }] } ``` **Example 示例：已完成的恢复点索引** ``` { "Records": [{ "EventSource": "aws:sns", "EventVersion": "1.0", "EventSubscriptionArn": "arn:aws:sns:...-a3802aa1ed45", "Sns": { "Type": "Notification", "MessageId": "12345678-abcd-123a-def0-abcd1a234567", "TopicArn": "arn:aws:sns:us-west-1:123456789012:backup-2sqs-sns-topic", "Subject": "Notification from AWS Backup", "Message": "An AWS Backup backup index job was completed. Indexed recovery point arn: arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456", "Timestamp": "2025-05-25T18:46:02.788Z", ... "MessageAttributes" : { "EventType" : {"Type":"String","Value":"RECOVERY_POINT_INDEXING_COMPLETED"}, "AccountId" : {"Type":"String","Value":"123456789012"}, "IndexStatus" : {"Type":"String","Value":"ACTIVE"}, "IsIndexingContinuous" : {"Type":"String","Value":"false"}, "RecoveryPointArn" : {"Type":"String","Value":"arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456"} } } }] } ``` **Example 示例：EKS 备份对象失败** ``` { "Records": [{ "EventSource": "aws:sns", "EventVersion": "1.0", "EventSubscriptionArn": "arn:aws:sns:...-a3802aa1ed45", "Sns": { "Type": "Notification", "MessageId": "12345678-abcd-123a-def0-abcd1a234567", "TopicArn": "arn:aws:sns:us-west-1:123456789012:backup-2sqs-sns-topic", "Subject": "Notification from AWS Backup", "Message": "A Kubernetes resource failed to backup from your Amazon EKS Backup. Resource: example.resource.io/v1. EKS Cluster Name: eks-cluster-name. BackupJob ID: 1b2345b2-f22c-4dab-5eb6-bbc7890ed123", "Timestamp": "2025-05-25T18:46:02.788Z", ... "MessageAttributes" : { "eventType" : {"Type":"String","Value":"EKS_BACKUP_OBJECT_FAILED"}, "backupJobId" : {"Type":"String","Value":"1b2345b2-f22c-4dab-5eb6-bbc7890ed123"}, "clusterName" : {"Type":"String","Value":"eks-cluster-name"}, "reason" : {"Type":"String","Value":"Example failure reason."}, "resourceName" : {"Type":"String","Value":"example.resource.io/v1"} } } }] } ``` **Example 示例：EKS 恢复对象失败** ``` { "Records": [{ "EventSource": "aws:sns", "EventVersion": "1.0", "EventSubscriptionArn": "arn:aws:sns:...-a3802aa1ed45", "Sns": { "Type": "Notification", "MessageId": "12345678-abcd-123a-def0-abcd1a234567", "TopicArn": "arn:aws:sns:us-west-1:123456789012:backup-2sqs-sns-topic", "Subject": "Notification from AWS Backup", "Message": "A Kubernetes resource failed to restore from your Amazon EKS Backup. Resource: apiextensions.k8s.io/v1/customresourcedefinitions. Resource Name: exampleresource. Destination EKS Cluster Name: eks-restore-target-cluster-name. RestoreJob ID: 1b2345b2-f22c-4dab-5eb6-bbc7890ed123", "Timestamp": "2025-05-25T18:46:02.788Z", ... "MessageAttributes" : { "eventType" : {"Type":"String","Value":"EKS_RESTORE_OBJECT_FAILED"}, "clusterName" : {"Type":"String","Value":"eks-restore-target-cluster-name"}, "parentRestoreJobId" : {"Type":"String","Value":"12345678-abcd-123a-def0-abcd1a234567"}, "reason" : {"Type":"String","Value":"Example failure reason."}, "resourceName" : {"Type":"String","Value":"exampleresourceio"}, "resourceType" : {"Type":"String","Value":"apiextensions.k8s.io/v1/customresourcedefinitions"}, "restoreJobId" : {"Type":"String","Value":"1b2345b2-f22c-4dab-5eb6-bbc7890ed123"} } } }] } ``` **Example 示例：跳过 EKS 还原对象** ``` { "Records": [{ "EventSource": "aws:sns", "EventVersion": "1.0", "EventSubscriptionArn": "arn:aws:sns:...-a3802aa1ed45", "Sns": { "Type": "Notification", "MessageId": "12345678-abcd-123a-def0-abcd1a234567", "TopicArn": "arn:aws:sns:us-west-1:123456789012:backup-2sqs-sns-topic", "Subject": "Notification from AWS Backup", "Message": "A Kubernetes resource was skipped from restore from your Amazon EKS Backup. This Kubernetes resource already exists in your target EKS cluster. Resource: apiextensions.k8s.io/v1/customresourcedefinitions. Resource Name: exampleresource. Destination EKS Cluster Name: eks-restore-target-cluster-name. RestoreJob ID: 1b2345b2-f22c-4dab-5eb6-bbc7890ed123", "Timestamp": "2025-05-25T18:46:02.788Z", ... "MessageAttributes" : { "eventType" : {"Type":"String","Value":"EKS_RESTORE_OBJECT_SKIPPED"}, "clusterName" : {"Type":"String","Value":"eks-restore-target-cluster-name"}, "parentRestoreJobId" : {"Type":"String","Value":"12345678-abcd-123a-def0-abcd1a234567"}, "reason" : {"Type":"String","Value":"Already exists."}, "resourceName" : {"Type":"String","Value":"exampleresource"}, "resourceType" : {"Type":"String","Value":"apiextensions.k8s.io/v1/customresourcedefinitions"}, "restoreJobId" : {"Type":"String","Value":"1b2345b2-f22c-4dab-5eb6-bbc7890ed123"} } } }] } ``` ### AWS Backup 通知命令示例 您可以使用 AWS CLI 命令订阅、列出和删除与您的 AWS Backup 活动有关的 Amazon SNS 通知。 #### 放置备份保管库通知示例 以下命令订阅指定备份保管库的 Amazon SNS 主题，该主题将在启动或完成还原作业时或修改恢复点时通知您。 ``` aws backup put-backup-vault-notifications --backup-vault-name myBackupVault --sns-topic-arn arn:aws:sns:region:account-id:myBackupTopic --backup-vault-events RESTORE_JOB_STARTED RESTORE_JOB_COMPLETED RECOVERY_POINT_MODIFIED ``` #### 获取备份保管库通知示例 以下命令列出了当前订阅指定备份保管库的 Amazon SNS 主题的所有事件。 ``` aws backup get-backup-vault-notifications --backup-vault-name myVault ``` 示例输出如下所示： ``` { "SNSTopicArn": "arn:aws:sns:region:account-id:myBackupTopic", "BackupVaultEvents": [ "RESTORE_JOB_STARTED", "RESTORE_JOB_COMPLETED", "RECOVERY_POINT_MODIFIED" ], "BackupVaultName": "myVault", "BackupVaultArn": "arn:aws:backup:region:account-id:backup-vault:myVault" } ``` #### 删除备份保管库通知示例 以下命令取消订阅指定备份保管库的 Amazon SNS 主题。 ``` aws backup delete-backup-vault-notifications --backup-vault-name myVault ``` ### 指定 AWS Backup 为服务主体 **注意** AWS Backup 要允许代表您发布 SNS 主题，您必须指定 AWS Backup 为服务委托人。 在用于跟踪 AWS Backup 事件的 Amazon SNS 主题的访问策略中加入以下 JSON。您必须指定主题资源的 Amazon 资源名称（ARN）。 ``` { "Sid": "My-statement-id", "Effect": "Allow", "Principal": { "Service": "backup.amazonaws.com" }, "Action": "SNS:Publish", "Resource": "arn:aws:sns:region:account-id:myTopic" } ``` 有关在 Amazon SNS 访问策略中指定服务主体的更多信息，请参阅《*亚马逊简单通知服务开发者*指南》中的 “[允许任何 AWS 资源向主题发布](https://docs.aws.amazon.com/sns/latest/dg/AccessPolicyLanguage_UseCases_Sns.html#AccessPolicyLanguage_UseCase4_Sns)”。 **注意** 如果您的主题已加密，则必须在策略中包含其他权限才能 AWS Backup 向其发布内容。有关启用服务发布到加密主题的更多信息，请参阅《*Amazon 简单通知服务开发者指南》*中的 “[启用来自 AWS 服务的事件源和加密主题之间的兼容性](https://docs.aws.amazon.com//sns/latest/dg/sns-key-management.html#sns-what-permissions-for-sse)”。