Hello Community,
I have a MediaAgent/Access node in AWS account A. I want to backup EC2 instances in AWS accounts B and C. My AWS account A is supposed to have access to accounts B and C.
Can I backup EC2 instance in other accounts?
It seems to be supported based on this page:
And if it is supported, are there any specific requirements. I could not find any information on the Commvault Documentation page. Or at least I didn’t find it.
Thanks so much for your help.
Best answer by Damian Andre
Hey
Long time my friend :)
Yes, its absolutely supported. In the software I believe this feature is now called “Using resources from an admin account” - https://documentation.commvault.com/2022e/essential/108958_using_resources_from_admin_account.html
Typical use case here is MSP using shared resources for tenants which is why its worded in this way. Does this meet your need?
+23Hey
Long time my friend :)
Yes, its absolutely supported. In the software I believe this feature is now called “Using resources from an admin account” - https://documentation.commvault.com/2022e/essential/108958_using_resources_from_admin_account.html
Typical use case here is MSP using shared resources for tenants which is why its worded in this way. Does this meet your need?
Long time indeed. :-)
Yes, it does help greatly. But I have to admin that I read the title and got confused with Commvault tenants (companies) and all those things, so I skipped.
Tittle is definitely misleading and should be worded differently.
Thanks very much my friend!
Me again. ;-)
As I’m reading it, I notice that it requires to create companies and tenants in Commvault. Is it necessary? Is there a way to avoid creating companies to backup between AWS accounts? Not all customers are MSPs. And these steps may be confusing if they never used companies. :-)
Thanks in advance.
+23Me again. ;-)
As I’m reading it, I notice that it requires to create companies and tenants in Commvault. Is it necessary? Is there a way to avoid creating companies to backup between AWS accounts? Not all customers are MSPs. And these steps may be confusing if they never used companies. :-)
Thanks in advance.
I don't think its required - just part of this use case. Go ahead and configure it and see how you go - I think in this use case there are separate credentials, and the VSA will automatically pick the right ones to use. In your case since you think that your access has access to the other (sub?) accounts, it may work without any special configuration.
Hi , we dont use company here but we need to backup EC2 instances from different accounts. Is this the only way the achieve my goal ??
Thanks!
That is the only way as of now. I agree, they should find a much better way to address, but that is the way to go for now.
This should be doable. You should not need to create tenants in Command Center. I just tested this in our environment successfully. I have a Media Agent/VSA Proxy in AWS Account 1 and successfully backed up EC2 Instance in AWS Account 2. I used IAM Roles in the main account in which the Media Agent/VSA Proxy resides. I then used Assume Role permissions to access the other AWS accounts.
Thanks for the hint!
Hi All,
we have a similar scenario.
If we deploy the CS onto one AWS Account and the MA/AN on another shared AWS Account, I guess in the “Using resources from an admin account” part of the wizard we should select the accout with VSa, correct ?
Many thanks
Francesco
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
