Amazon Aurora DSQL restore

1. Open the Amazon Backup console at https://console.amazonaws.cn/backup.

2. Select the "Restore" button next to the recovery point you wish to restore.

3. Configure the settings for the new cluster to which your recovery point will be restored.

   1. By default, the AMK (Amazon managed key) will be used to encrypt the restored data. You may alternatively specify a different key.

   2. Deletion protection for your Aurora clusters is enabled by default, but unselect the box to turn off the option.

4. Review the settings; when they are satisfactory, select the Restore backup button.

Single Region restore

1. Use the CLI command aws backup start-restore-job to restore an Aurora cluster from the specified recovery point.

2. Include the necessary metadata for the restore job. Example:

   {
       "recoveryPointArn": "arn",
       "tags": Map<String, String>,
       "metadata": {
           "regionalConfig": [
               {
                   "region": "us-east-1", // optional
                   "isDeletionProtectionEnabled": true, // optional
                   "kmsKeyId": "my_key" // optional
               },
           ]
       }
   }

1. Sign in to the Amazon Management Console and open the Amazon Backup console at https://console.aws.amazon.com/backup.

2. In the navigation pane, choose Backup vaults.

3. Choose the backup vault that contains the Aurora DSQL recovery point you want to restore.

4. Select the recovery point you want to restore, then choose Restore.

5. On the restore page, under Restore options, select Add peer Regions to enable multi-Region restore.

6. Select a Peer cluster Region from the dropdown menu. This Region must be within the same triplet as your current Region and also must contain a cross-Region copy from the recovery point in the current (first) Region.

7. Select a Witness Region from the dropdown menu. This Region must also be within the same triplet.

8. Configure the Cluster settings for both the primary and peer Region clusters:

   1. For the primary cluster, configure:

      • Cluster encryption (optional): Select a KMS key for encryption.

      • Deletion protection: Enable or disable deletion protection.

   2. For the peer Region cluster, configure:

      • Peer Region cluster encryption (optional): Select a KMS key for encryption.

      • Peer Region cluster deletion protection: Enable or disable deletion protection.

9. Review your settings and choose Restore backup.

10. The console will initiate the multi-Region restore process, which creates clusters in both Regions and automatically links them together.

Multi-Region restore through Amazon CLI using orchestrated restore metadata

1. Create a restore job using the CLI command aws backup start-restore-job with the new multi-Region orchestration metadata:

   aws backup start-restore-job \
   --recovery-point-arn "arn:aws:backup:us-east-1:123456789012:recovery-point:abcd1234" \
   --metadata '{
       "witnessRegion": "us-west-1",
       "useMultiRegionOrchestration": true,
       "peerRegion": ["us-east-2"],
       "regionalConfig": "[{\"region\":\"us-east-1\",\"isDeletionProtectionEnabled\":true,\"kmsKeyId\":\"arn:aws:kms:us-east-1:123456789012:key/ba4b3773-4bb8-4a7a-994c-46ede70202f5\"},{\"region\":\"us-west-2\",\"isDeletionProtectionEnabled\":true,\"kmsKeyId\":\"arn:aws:kms:us-west-2:123456789012:key/ba4b3773-4bb8-4a7a-994c-46ede70202f5\"}]"
   }'
   

   The metadata structure includes:

   • witnessRegion: The Region that will serve as the witness for the multi-Region cluster. For more information, see Resilience in Amazon Aurora DSQL.

   • useMultiRegionOrchestration: Set to true to enable multi-Region orchestration.

   • peerRegion: An array containing the Region(s) with peer clusters in the multi-Region cluster. For more information, see MultiRegionProperties in the Aurora DSQL API Reference.

   • regionalConfig: An array containing configuration for each Region:

     • region: The Amazon Web Services Region identifier.

     • isDeletionProtectionEnabled: Boolean flag to enable/disable deletion protection. For more information, see CreateCluster in the Aurora DSQL API Reference.

     • kmsKeyId: The KMS key ARN for encryption (optional).

     If regionalConfig properties are not specified, then default values will be applied: default encryption and isDeletionProtectionEnabled = TRUE.

2. Monitor the restore job status using the aws backup describe-restore-job command:

   aws backup describe-restore-job --restore-job-id job-12345678

3. Once the restore job completes, you can verify the multi-Region cluster configuration using the Aurora DSQL CLI:

   aws dsql describe-cluster --cluster-identifier your-cluster-id

   For more information about multi-Region cluster operations, see UpdateCluster in the Aurora DSQL API Reference.