CopyDBSnapshot
Copies the specified DB snapshot. The source DB snapshot must be in the available
state.
You can copy a snapshot from one Amazon Web Services Region to another. In that case, the
Amazon Web Services Region where you call the CopyDBSnapshot
operation is the destination
Amazon Web Services Region for the DB snapshot copy.
This command doesn't apply to RDS Custom.
For more information about copying snapshots, see Copying a DB Snapshot in the Amazon RDS User Guide.
Request Parameters
For information about the parameters that are common to all actions, see Common Parameters.
- SourceDBSnapshotIdentifier
-
The identifier for the source DB snapshot.
If the source snapshot is in the same Amazon Web Services Region as the copy, specify a valid DB snapshot identifier. For example, you might specify
rds:mysql-instance1-snapshot-20130805
.If the source snapshot is in a different Amazon Web Services Region than the copy, specify a valid DB snapshot ARN. For example, you might specify
arn:aws:rds:us-west-2:123456789012:snapshot:mysql-instance1-snapshot-20130805
.If you are copying from a shared manual DB snapshot, this parameter must be the Amazon Resource Name (ARN) of the shared DB snapshot.
If you are copying an encrypted snapshot this parameter must be in the ARN format for the source Amazon Web Services Region.
Constraints:
-
Must specify a valid system snapshot in the "available" state.
Example:
rds:mydb-2012-04-02-00-01
Example:
arn:aws:rds:us-west-2:123456789012:snapshot:mysql-instance1-snapshot-20130805
Type: String
Required: Yes
-
- TargetDBSnapshotIdentifier
-
The identifier for the copy of the snapshot.
Constraints:
-
Can't be null, empty, or blank
-
Must contain from 1 to 255 letters, numbers, or hyphens
-
First character must be a letter
-
Can't end with a hyphen or contain two consecutive hyphens
Example:
my-db-snapshot
Type: String
Required: Yes
-
- CopyOptionGroup
-
Specifies whether to copy the DB option group associated with the source DB snapshot to the target Amazon Web Services account and associate with the target DB snapshot. The associated option group can be copied only with cross-account snapshot copy calls.
Type: Boolean
Required: No
- CopyTags
-
Specifies whether to copy all tags from the source DB snapshot to the target DB snapshot. By default, tags aren't copied.
Type: Boolean
Required: No
- KmsKeyId
-
The Amazon KMS key identifier for an encrypted DB snapshot. The Amazon KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.
If you copy an encrypted DB snapshot from your Amazon Web Services account, you can specify a value for this parameter to encrypt the copy with a new KMS key. If you don't specify a value for this parameter, then the copy of the DB snapshot is encrypted with the same Amazon KMS key as the source DB snapshot.
If you copy an encrypted DB snapshot that is shared from another Amazon Web Services account, then you must specify a value for this parameter.
If you specify this parameter when you copy an unencrypted snapshot, the copy is encrypted.
If you copy an encrypted snapshot to a different Amazon Web Services Region, then you must specify an Amazon KMS key identifier for the destination Amazon Web Services Region. KMS keys are specific to the Amazon Web Services Region that they are created in, and you can't use KMS keys from one Amazon Web Services Region in another Amazon Web Services Region.
Type: String
Required: No
- OptionGroupName
-
The name of an option group to associate with the copy of the snapshot.
Specify this option if you are copying a snapshot from one Amazon Web Services Region to another, and your DB instance uses a nondefault option group. If your source DB instance uses Transparent Data Encryption for Oracle or Microsoft SQL Server, you must specify this option when copying across Amazon Web Services Regions. For more information, see Option group considerations in the Amazon RDS User Guide.
Type: String
Required: No
- PreSignedUrl
-
When you are copying a snapshot from one Amazon GovCloud (US) Region to another, the URL that contains a Signature Version 4 signed request for the
CopyDBSnapshot
API operation in the source Amazon Web Services Region that contains the source DB snapshot to copy.This setting applies only to Amazon GovCloud (US) Regions. It's ignored in other Amazon Web Services Regions.
You must specify this parameter when you copy an encrypted DB snapshot from another Amazon Web Services Region by using the Amazon RDS API. Don't specify
PreSignedUrl
when you are copying an encrypted DB snapshot in the same Amazon Web Services Region.The presigned URL must be a valid request for the
CopyDBClusterSnapshot
API operation that can run in the source Amazon Web Services Region that contains the encrypted DB cluster snapshot to copy. The presigned URL request must contain the following parameter values:-
DestinationRegion
- The Amazon Web Services Region that the encrypted DB snapshot is copied to. This Amazon Web Services Region is the same one where theCopyDBSnapshot
operation is called that contains this presigned URL.For example, if you copy an encrypted DB snapshot from the us-west-2 Amazon Web Services Region to the us-east-1 Amazon Web Services Region, then you call the
CopyDBSnapshot
operation in the us-east-1 Amazon Web Services Region and provide a presigned URL that contains a call to theCopyDBSnapshot
operation in the us-west-2 Amazon Web Services Region. For this example, theDestinationRegion
in the presigned URL must be set to the us-east-1 Amazon Web Services Region. -
KmsKeyId
- The Amazon KMS key identifier for the KMS key to use to encrypt the copy of the DB snapshot in the destination Amazon Web Services Region. This is the same identifier for both theCopyDBSnapshot
operation that is called in the destination Amazon Web Services Region, and the operation contained in the presigned URL. -
SourceDBSnapshotIdentifier
- The DB snapshot identifier for the encrypted snapshot to be copied. This identifier must be in the Amazon Resource Name (ARN) format for the source Amazon Web Services Region. For example, if you are copying an encrypted DB snapshot from the us-west-2 Amazon Web Services Region, then yourSourceDBSnapshotIdentifier
looks like the following example:arn:aws:rds:us-west-2:123456789012:snapshot:mysql-instance1-snapshot-20161115
.
To learn how to generate a Signature Version 4 signed request, see Authenticating Requests: Using Query Parameters (Amazon Signature Version 4) and Signature Version 4 Signing Process.
Note
If you are using an Amazon SDK tool or the Amazon CLI, you can specify
SourceRegion
(or--source-region
for the Amazon CLI) instead of specifyingPreSignedUrl
manually. SpecifyingSourceRegion
autogenerates a presigned URL that is a valid request for the operation that can run in the source Amazon Web Services Region.Type: String
Required: No
-
- Tags.Tag.N
-
A list of tags.
For more information, see Tagging Amazon RDS resources in the Amazon RDS User Guide or Tagging Amazon Aurora and Amazon RDS resources in the Amazon Aurora User Guide.
Type: Array of Tag objects
Required: No
- TargetCustomAvailabilityZone
-
The external custom Availability Zone (CAZ) identifier for the target CAZ.
Example:
rds-caz-aiqhTgQv
.Type: String
Required: No
Response Elements
The following element is returned by the service.
- DBSnapshot
-
Contains the details of an Amazon RDS DB snapshot.
This data type is used as a response element in the
DescribeDBSnapshots
action.Type: DBSnapshot object
Errors
For information about the errors that are common to all actions, see Common Errors.
- CustomAvailabilityZoneNotFound
-
CustomAvailabilityZoneId
doesn't refer to an existing custom Availability Zone identifier.HTTP Status Code: 404
- DBSnapshotAlreadyExists
-
DBSnapshotIdentifier
is already used by an existing snapshot.HTTP Status Code: 400
- DBSnapshotNotFound
-
DBSnapshotIdentifier
doesn't refer to an existing DB snapshot.HTTP Status Code: 404
- InvalidDBSnapshotState
-
The state of the DB snapshot doesn't allow deletion.
HTTP Status Code: 400
- KMSKeyNotAccessibleFault
-
An error occurred accessing an Amazon KMS key.
HTTP Status Code: 400
- SnapshotQuotaExceeded
-
The request would result in the user exceeding the allowed number of DB snapshots.
HTTP Status Code: 400
Examples
Example
This example illustrates one usage of CopyDBSnapshot.
Sample Request
https://rds.us-east-1.amazonaws.com/
?Action=CopyDBSnapshot
&SignatureMethod=HmacSHA256
&SignatureVersion=4
&SourceDBSnapshotIdentifier=arn%3Aaws%3Ards%3Aus-east-1%3A123456789012%3Asnapshot%3Ards%3Amysqldb-2021-04-27-08-16
&TargetDBSnapshotIdentifier=mysqldb-copy
&Version=2014-10-31
&X-Amz-Algorithm=AWS4-HMAC-SHA256
&X-Amz-Credential=AKIADQKE4SARGYLE/20140429/us-east-1/rds/aws4_request
&X-Amz-Date=20210629T175351Z
&X-Amz-SignedHeaders=content-type;host;user-agent;x-amz-content-sha256;x-amz-date
&X-Amz-Signature=9164337efa99caf850e874a1cb7ef62f3cea29d0b448b9e0e7c53b288ddffed2
Sample Response
<CopyDBSnapshotResponse xmlns="http://rds.amazonaws.com/doc/2014-10-31/">
<CopyDBSnapshotResult>
<DBSnapshot>
<Port>3306</Port>
<OptionGroupName>default:mysql-5-6</OptionGroupName>
<Engine>mysql</Engine>
<Status>available</Status>
<SnapshotType>manual</SnapshotType>
<LicenseModel>general-public-license</LicenseModel>
<EngineVersion>5.6.44</EngineVersion>
<DBInstanceIdentifier>mysqldb</DBInstanceIdentifier>
<DBSnapshotIdentifier>mysqldb-copy</DBSnapshotIdentifier>
<SnapshotCreateTime>2021-05-11T06:02:03.422Z</SnapshotCreateTime>
<OriginalSnapshotCreateTime>2021-04-27T08:16:05.356Z</OriginalSnapshotCreateTime>
<AvailabilityZone>us-east-1a</AvailabilityZone>
<InstanceCreateTime>2021-04-21T22:24:26.573Z</InstanceCreateTime>
<PercentProgress>100</PercentProgress>
<AllocatedStorage>100</AllocatedStorage>
<MasterUsername>admin</MasterUsername>
</DBSnapshot>
</CopyDBSnapshotResult>
<ResponseMetadata>
<RequestId>2928d60e-beb6-11d3-8e5c-3ccda5460c46</RequestId>
</ResponseMetadata>
</CopyDBSnapshotResponse>
See Also
For more information about using this API in one of the language-specific Amazon SDKs, see the following: