Search for Well Architected Advice
-
Operational Excellence
-
- Resources have identified owners
- Processes and procedures have identified owners
- Operations activities have identified owners responsible for their performance
- Team members know what they are responsible for
- Mechanisms exist to identify responsibility and ownership
- Mechanisms exist to request additions, changes, and exceptions
- Responsibilities between teams are predefined or negotiated
-
- Executive Sponsorship
- Team members are empowered to take action when outcomes are at risk
- Escalation is encouraged
- Communications are timely, clear, and actionable
- Experimentation is encouraged
- Team members are encouraged to maintain and grow their skill sets
- Resource teams appropriately
- Diverse opinions are encouraged and sought within and across teams
-
- Use version control
- Test and validate changes
- Use configuration management systems
- Use build and deployment management systems
- Perform patch management
- Implement practices to improve code quality
- Share design standards
- Use multiple environments
- Make frequent, small, reversible changes
- Fully automate integration and deployment
-
- Have a process for continuous improvement
- Perform post-incident analysis
- Implement feedback loops
- Perform knowledge management
- Define drivers for improvement
- Validate insights
- Perform operations metrics reviews
- Document and share lessons learned
- Allocate time to make improvements
- Perform post-incident analysis
-
Security
-
- Separate workloads using accounts
- Secure account root user and properties
- Identify and validate control objectives
- Keep up-to-date with security recommendations
- Keep up-to-date with security threats
- Identify and prioritize risks using a threat model
- Automate testing and validation of security controls in pipelines
- Evaluate and implement new security services and features regularly
-
- Define access requirements
- Grant least privilege access
- Define permission guardrails for your organization
- Manage access based on life cycle
- Establish emergency access process
- Share resources securely within your organization
- Reduce permissions continuously
- Share resources securely with a third party
- Analyze public and cross-account access
-
- Perform regular penetration testing
- Deploy software programmatically
- Regularly assess security properties of the pipelines
- Train for Application Security
- Automate testing throughout the development and release lifecycle
- Manual Code Reviews
- Centralize services for packages and dependencies
- Build a program that embeds security ownership in workload teams
-
-
Reliability
-
- Be aware of service quotas and constraints in Cloud Services
- Manage service quotas across accounts and Regions
- Accommodate fixed service quotas and constraints through architecture
- Monitor and manage quotas
- Automate quota management
- Ensure sufficient gap between quotas and usage to accommodate failover
-
- Use highly available network connectivity for your workload public endpoints
- Provision Redundant Connectivity Between Private Networks in the Cloud and On-Premises Environments
- Ensure IP subnet allocation accounts for expansion and availability
- Prefer hub-and-spoke topologies over many-to-many mesh
- Enforce non-overlapping private IP address ranges in all private address spaces where they are connected
-
- Monitor end-to-end tracing of requests through your system
- Conduct reviews regularly
- Analytics
- Automate responses (Real-time processing and alarming)
- Send notifications (Real-time processing and alarming)
- Define and calculate metrics (Aggregation)
- Monitor End-to-End Tracing of Requests Through Your System
- Define and calculate metrics
- Send notifications
- Automate responses
-
- Monitor all components of the workload to detect failures
- Fail over to healthy resources
- Automate healing on all layers
- Rely on the data plane and not the control plane during recovery
- Use static stability to prevent bimodal behavior
- Send notifications when events impact availability
- Architect your product to meet availability targets and uptime service level agreements (SLAs)
-
-
Cost Optimization
-
- Establish ownership of cost optimization
- Establish a partnership between finance and technology
- Establish cloud budgets and forecasts
- Implement cost awareness in your organizational processes
- Monitor cost proactively
- Keep up-to-date with new service releases
- Quantify business value from cost optimization
- Report and notify on cost optimization
- Create a cost-aware culture
-
- Perform cost analysis for different usage over time
- Analyze all components of this workload
- Perform a thorough analysis of each component
- Select components of this workload to optimize cost in line with organization priorities
- Perform cost analysis for different usage over time
- Select software with cost effective licensing
-
-
Performance
-
- Learn about and understand available cloud services and features
- Evaluate how trade-offs impact customers and architecture efficiency
- Use guidance from your cloud provider or an appropriate partner to learn about architecture patterns and best practices
- Factor cost into architectural decisions
- Use policies and reference architectures
- Use benchmarking to drive architectural decisions
- Use a data-driven approach for architectural choices
-
- Use purpose-built data store that best support your data access and storage requirements
- Collect and record data store performance metrics
- Evaluate available configuration options for data store
- Implement Strategies to Improve Query Performance in Data Store
- Implement data access patterns that utilize caching
-
- Understand how networking impacts performance
- Evaluate available networking features
- Choose appropriate dedicated connectivity or VPN for your workload
- Use load balancing to distribute traffic across multiple resources
- Choose network protocols to improve performance
- Choose your workload's location based on network requirements
- Optimize network configuration based on metrics
-
- Establish key performance indicators (KPIs) to measure workload health and performance
- Use monitoring solutions to understand the areas where performance is most critical
- Define a process to improve workload performance
- Review metrics at regular intervals
- Load test your workload
- Use automation to proactively remediate performance-related issues
- Keep your workload and services up-to-date
-
-
Sustainability
-
- Scale workload infrastructure dynamically
- Align SLAs with sustainability goals
- Optimize geographic placement of workloads based on their networking requirements
- Stop the creation and maintenance of unused assets
- Optimize team member resources for activities performed
- Implement buffering or throttling to flatten the demand curve
-
- Optimize software and architecture for asynchronous and scheduled jobs
- Remove or refactor workload components with low or no use
- Optimize areas of code that consume the most time or resources
- Optimize impact on devices and equipment
- Use software patterns and architectures that best support data access and storage patterns
- Remove unneeded or redundant data
- Use technologies that support data access and storage patterns
- Use policies to manage the lifecycle of your datasets
- Use shared file systems or storage to access common data
- Back up data only when difficult to recreate
- Use elasticity and automation to expand block storage or file system
- Minimize data movement across networks
- Implement a data classification policy
- Remove unneeded or redundant data
-
- Articles coming soon
< All Topics
Print
Perform data backup automatically
PostedDecember 20, 2024
UpdatedMarch 22, 2025
ByKevin McCaffrey
Automating data backups is critical for ensuring data safety and achieving target recovery time and point objectives. This approach eliminates human error and guarantees that backups are completed consistently, thereby safeguarding against data loss.
Best Practices
Automated Backup Configuration
- Utilize AWS Backup to define backup plans that automatically back up your data based on your RPO requirements.
- Incorporate lifecycle policies to transition older backups to lower-cost storage services like Amazon S3 Glacier.
- Implement versioning on Amazon S3 buckets for critical datasets to retain multiple copies across different periods.
- Schedule backups during off-peak hours to minimize impact on performance and costs.
- Regularly test your backup process to ensure that data can be restored quickly and completely in line with your RTO and RPO.
Questions to ask your team
- What automated backup solutions are currently in use?
- How frequently are backups scheduled based on your Recovery Point Objective (RPO)?
- Are there any critical datasets that require more frequent backups?
- Do you have monitoring and alerts in place to notify you of backup successes or failures?
- How do you handle backup verification to ensure data integrity?
- Are backups being stored in multiple locations to increase reliability?
- What is the process for restoring data from backups, and how often is it tested?
Who should be doing this?
Backup Administrator
- Configure and schedule automated backups based on RPO requirements.
- Monitor backup processes to ensure completion and success.
- Adjust backup frequency and retention policies based on data criticality.
- Perform regular tests of backup restorations to validate recovery capabilities.
- Document backup procedures and update them as requirements change.
System Architect
- Assess the criticality of datasets to define appropriate RPOs.
- Work with the Backup Administrator to design backup solutions that align with architectural best practices.
- Oversee the integration of backup solutions with applications and data storage.
- Support the ongoing evaluation of backup technologies and strategies.
Data Owner
- Define and communicate the importance of data to inform backup strategy.
- Review and approve backup schedules based on business needs and acceptable data loss levels.
- Provide input on changes in data that may affect backup frequency.
- Ensure compliance with regulatory and organizational data management policies.
What evidence shows this is happening in your organization?
- Automated Backup Policy Template: A standardized policy template outlining the requirements for automated data backups, including RTO and RPO commitments, and defining backup frequency and retention based on data criticality.
- Backup Automation Strategy Guide: A comprehensive guide detailing the steps and best practices for configuring automated backups for various AWS services, ensuring alignment with organizational RPO and RTO standards.
- Backup Schedule Dashboard: A visual dashboard representing the automated backup schedules for critical datasets, showcasing the frequency of backups and compliance with RPO objectives.
- Backup Recovery Plan: A detailed plan that outlines recovery procedures for data restoration from automated backups, including testing protocols to ensure RTO and RPO are met.
- Backup Compliance Checklist: A checklist that ensures all backup operations are compliant with company policies, focusing on automation settings, schedule adherence, and monitoring measures.
Cloud Services
AWS
- Amazon S3: Amazon S3 provides secure and durable storage for backups, allowing users to set lifecycle policies for automated backups based on RPO requirements.
- AWS Backup: AWS Backup automates and centrally manages backups across AWS services, with customizable schedules that meet RPO needs.
- Amazon RDS: Amazon RDS can automatically back up your databases, allowing you to restore to any point in time within a specified retention period.
Azure
- Azure Backup: Azure Backup provides simple and reliable backup of Azure resources, enabling automated backups with policies aligned to RPO.
- Azure Blob Storage: Azure Blob Storage can store backup data and offers lifecycle management features for automated back up of data.
- Azure SQL Database: Azure SQL Database provides automated backups that ensure your data can be restored in line with your RPO.
Google Cloud Platform
- Google Cloud Storage: Google Cloud Storage offers durable and highly available storage solutions for backups with features for lifecycle management.
- Google Cloud Backup and DR: Google Cloud Backup and DR automates backups for your applications across Google Cloud services, helping you manage RPO effectively.
- Cloud SQL: Cloud SQL provides automated backups that allow you to restore databases quickly to a specific point in time, supporting RPO requirements.
Question: How do you back up data?
Pillar: Reliability (Code: REL)
Table of Contents