- \n
- \u00a0In the AWS Management Console, go to IAM service.\u00a0 On the right side click on Users then Add User:
\n\n\t\t\t \n\t\t\t\t![\"AWS](\"https:\/\/developer.ps\/wp-content\/uploads\/2017\/11\/aws_1-300x94.png\")
<\/a>\n\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\tAWS IAM User\n\t\t\t\t<\/figcaption><\/figure>\n\t\t<\/div>\n<\/li>\n - \u00a0Type In user name<\/strong> and select Programmatic access<\/strong>. Then Next:Permissions<\/strong><\/li>\n
- \u00a0On the next page select “Attach existing policy directly<\/strong>” then click on Create Policy<\/strong><\/li>\n
- \u00a0Click on the JSON<\/strong> tab then copy\/paste the code below(we will use one policy for creating and deleting snapshots):\n
{\r\n \"Version\": \"2012-10-17\",\r\n \"Statement\": [\r\n {\r\n \"Sid\": \"Stmt1426256275000\",\r\n \"Effect\": \"Allow\",\r\n \"Action\": [\r\n \"ec2:CreateSnapshot\",\r\n \"ec2:CreateTags\",\r\n \"ec2:DeleteSnapshot\",\r\n \"ec2:DescribeSnapshots\",\r\n \"ec2:DescribeVolumes\",\r\n \"ec2:DescribeInstances\"\t\t\t\t\r\n ],\r\n \"Resource\": [\r\n \"*\"\r\n ]\r\n },{\r\n \"Sid\": \"Stmt1422916495000\",\r\n \"Effect\": \"Allow\",\r\n \"Action\": [\r\n \"ec2:DeleteSnapshot\",\r\n \"ec2:DescribeSnapshots\"\r\n ],\r\n \"Resource\": [\r\n \"*\"\r\n ]\r\n }\r\n ]\r\n}<\/pre>\n<\/li>\n
- \u00a0Click on Review policy <\/strong><\/li>\n
- \u00a0Give it a Name<\/strong> and Description<\/strong>, such as CMD-SNAPSHOTS-POLICY. Then Click on Create policy<\/strong><\/li>\n
- \u00a0Back to the Permissions Page. Click on the Refresh<\/strong> button and type in the filter the name of the policy you’ve just created.\u00a0 Should see the new policy. Select it, then click on Next: Preview <\/strong><\/strong><\/strong>and on the next page Create User<\/strong>
\n\n\t\t\t \n\t\t\t\t![\"IAM](\"https:\/\/developer.ps\/wp-content\/uploads\/2017\/11\/aws_2-300x136.png\")
<\/a>\n\t\t\t<\/div><\/figure>\n\t\t<\/div>\n<\/li>\n- \u00a0From the next page, make a copy of the Access key ID <\/strong>& Secret access key<\/strong><\/strong><\/li>\n
- On the server, create a new file, and save it to $HOME\/.awssecret<\/strong>, with the following format:\n
Access key id\r\nSecret access key<\/pre>\n
<\/li>\n<\/ul>\n<\/li>\n
- Using ec2-consistent-snapshot from https:\/\/github.com\/alestic\/ec2-consistent-snapshot<\/a> to take snapshots.On a Centos 7 system, Enable epel:\n
wget dl.fedoraproject.org\/pub\/epel\/7\/x86_64\/Packages\/e\/epel-release-7-11.noarch.rpm\r\nrpm -ivh epel-release-7-10.noarch.rpm<\/pre>\n
Then install the required Modules:<\/p>\n
yum install \\\r\n perl-DBI \\\r\n perl-DBD-M ySQL \\\r\n perl-Getopt-Long \\\r\n perl-Pod-Usage \\\r\n perl-File-Slurp \\\r\n perl-IO-Socket-SSL \\\r\n perl-Net-Amazon-EC2 \\\r\n perl-Time-HiRes \\\r\n perl-Net-SSLeay \\\r\n perl-Params-Validate \\\r\n ca-certificates \\\r\n perl-DateTime\r\n<\/pre>\n
If you are using cPanel, install the required Perl Modules by login to WHM, then Software<\/strong> -> Install Perl Modules<\/strong>. Then install the following:<\/p>\n
DBD::mysql<\/em>
\nGetopt::Long<\/em>
\nPod::Usage<\/em>
\nFile::Basename<\/em>
\nFile::Slurp<\/em>
\nIO::Dir<\/em>
\nIO::Socket::SSL<\/em>
\nLWP::UserAgent<\/em>
\nTime::HiRes<\/em>
\nNet::Amazon::EC2<\/em>
\nDateTime::Locale<\/em>
\nDateTime::TimeZone<\/em><\/p>\nNot 100% sure if this is all the needed module, you can see what’s missing when you run the script. Just make a note of the error and install the missing module.<\/p>\n
After that download the script from : https:\/\/github.com\/alestic\/ec2-consistent-snapshot<\/a><\/p>\n
Save it to a folder on your system, I choose \/aws
\nMake it executable: chmod +x \/aws\/ec2-consistent-snapshot<\/li>\n- To delete old\u00a0 snapshots, I’ve used: ec2-expire-snapshots from https:\/\/github.com\/alestic\/ec2-expire-snapshots
\n<\/a>Needed Perl Modules<\/p>\nyum install perl-Date-Manip \\\r\n perl-DateTime \\\r\n perl-DateTime-TimeZone \\\r\n perl-DateTime-Format-ISO8601 \\\r\n perl-File-Slurp \\\r\n perl-Time-HiRes \\\r\n perl-Params-Validate \\\r\n ca-certificates \\\r\n perl-DBD-MySQL \\\r\n perl-Net-Amazon-EC2<\/pre>\n
If there is a problem with the package perl-Net-Amazon-EC2. Then use cpan (https:\/\/goo.gl\/fdEPvU<\/a>):<\/p>\n
yum install -y expat-devel\r\ncpan App::cpanminus # a better package manager for CPAN\r\n\/usr\/local\/bin\/cpanm Net::Amazon::EC2<\/pre>\n
Cpanel (Bold = installed in previous step):<\/p>\n
Date::Manip
\nDateTime
\nDateTime::TimeZone<\/strong>
\nDateTime::Format::ISO8601
\nFile::Slurp<\/strong>
\nTime::HiRes<\/strong>
\nParams::Validate
\nNet::Amazon::EC2<\/strong>
\nMoose::Exception::ValidationFailedForInlineTypeConstraint<\/p>\nAfter that download the script from: https:\/\/github.com\/alestic\/ec2-expire-snapshots<\/a>
\nSave it to the same folder on your system:
\nMake it executable: chmod +x \/aws\/ec2-expire-snapshots<\/a><\/li>\n- Create a script and cron job to run the previous scripts:
\ncreate a file called: aws_snapshots<\/p>\nvolume='vol-ID'\r\n\r\necho \"AWS Snaphot backup started\"\r\necho \"Date: `date`\"\r\necho \"\"\r\n\/aws\/ec2-consistent-snapshot --mysql --debug --region eu-west-1 $volume\r\necho \"AWS Snaphot backup Ended\"\r\necho \"\"\r\necho \"Removing old snapshots\"\r\n\/aws\/ec2-expire-snapshots \\\r\n --region eu-west-1 \\\r\n --keep-most-recent 1 \\\r\n --keep-first-daily 7 \\\r\n --keep-first-weekly 4 \\\r\n --keep-first-monthly 6 \\\r\n $volume \r\necho \"done\"<\/pre>\n
(Better explore the options offered by ec2-consistent-snapshot & ec2-expire-snapshots, and change the script accordingly)<\/p>\n
Make the script runnable: chmod +x \/aws\/aws_snapshots<\/p>\n
add it to your cron job to run daily<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"
Create and delete snapshots according to retention plan. IAM account: \u00a0In the AWS Management Console, go to IAM service.\u00a0 On the right side click on […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15,14,13],"tags":[],"class_list":["post-118","post","type-post","status-publish","format-standard","hentry","category-amazon-ec2","category-centos","category-linux"],"_links":{"self":[{"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/posts\/118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/comments?post=118"}],"version-history":[{"count":27,"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/posts\/118\/revisions"}],"predecessor-version":[{"id":148,"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/posts\/118\/revisions\/148"}],"wp:attachment":[{"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/media?parent=118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/categories?post=118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/developer.ps\/index.php\/wp-json\/wp\/v2\/tags?post=118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- \u00a0Type In user name<\/strong> and select Programmatic access<\/strong>. Then Next:Permissions<\/strong><\/li>\n