# Copying backups
<a name="copy-backups"></a>

You can use Amazon FSx to manually copy backups within the same Amazon account to another Amazon Region (cross-Region copies) or within the same Amazon Region (in-Region copies). You can make cross-Region copies only within the same Amazon partition. You can create user-initiated backup copies using the Amazon FSx console, Amazon CLI, or API. When you create a user-initiated backup copy, it has the type `USER_INITIATED`.

*Cross-Region backup copies* are particularly valuable for cross-Region disaster recovery. You take backups and copy them to another Amazon Region so that in the event of a disaster in the primary Amazon Region, you can restore from backup and recover availability quickly in the other Amazon Region. You can also use backup copies to clone your file dataset to another Amazon Region or within the same Amazon Region. You make backup copies within the same Amazon account (cross-Region or in-Region) by using the Amazon FSx console, Amazon CLI, or Amazon FSx API.

## Backup copy limitations
<a name="copy-limitations"></a>

The following are some limitations when you copy backups:
+ Backups of file systems using the Intelligent-Tiering storage class do not support backup copies.
+ Cross-Region backup copies are supported only between any two commercial Amazon Regions, between the China (Beijing) and China (Ningxia) Regions, and between the Amazon GovCloud (US-East) and Amazon GovCloud (US-West) Regions, but not across those sets of Regions.
+ You can make in-Region backup copies within any Amazon Region.
+ The source backup must have a status of `AVAILABLE` before you can copy it.
+ You cannot delete a source backup if it is being copied. There might be a short delay between when the destination backup becomes available and when you are allowed to delete the source backup. You should keep this delay in mind if you retry deleting a source backup.
+ You can have up to five backup copy requests in progress to a single destination Amazon Region per account.

## Permissions for cross-Region backup copies
<a name="copy-permissions"></a>

You use an IAM policy statement to grant permissions to perform a backup copy operation. To communicate with the source Amazon Region to request a cross-Region backup copy, the requester (IAM role or IAM user) must have access to the source backup and the source Amazon Region.

You use the policy to grant permissions to the `CopyBackup` action for the backup copy operation. You specify the action in the policy's `Action` field, and you specify the resource value in the policy's `Resource` field, as in the following example.

------
#### [ JSON ]

****  

```
{
    "Version":"2012-10-17",		 	 	 
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "fsx:CopyBackup",
            "Resource": "arn:aws-cn:fsx:*:111111111111:backup/*"
        }
    ]
}
```

------

For more information on IAM policies, see [Policies and permissions in IAM](https://docs.amazonaws.cn/IAM/latest/UserGuide/access_policies.html) in the *IAM User Guide*.

## Full and incremental copies
<a name="copy-incrementals"></a>

When you copy a backup to a different Amazon Region from the source backup, the first copy is a full backup copy. After the first backup copy, all subsequent backup copies to the same destination Region within the same Amazon account are incremental, provided that you haven't deleted all previously-copied backups in that Region and have been using the same Amazon KMS key. If both conditions aren't met, the copy operation results in a full (not incremental) backup copy.

------
#### [ To copy a backup (Amazon FSx console) ]

1. Open the Amazon FSx console at [https://console.amazonaws.cn/fsx/](https://console.amazonaws.cn/fsx/).

1. In the navigation pane, choose **Backups**.

1. In the **Backups** table, choose the backup that you want to copy, and then choose **Copy backup**.

1. In the **Settings** section, do the following:
   + In the **Destination Region** list, choose a destination Amazon Region to copy the backup to. The destination can be in another Amazon Region (cross-Region copy) or within the same Amazon Region (in-Region copy).
   + (Optional) Select **Copy Tags** to copy tags from the source backup to the destination backup. If you select **Copy Tags** and also add tags at step 6, all the tags are merged.

1. For **Encryption**, choose the Amazon KMS encryption key to encrypt the copied backup.

1. For **Tags - optional**, enter a key and value to add tags for your copied backup. If you add tags here and also selected **Copy Tags** at step 4, all the tags are merged.

1. Choose **Copy backup**.

Your backup is copied within the same Amazon account to the selected Amazon Region.

------
#### [ To copy a backup (Amazon CLI) ]
+ Use the `copy-backup` CLI command or the [CopyBackup](https://docs.amazonaws.cn/fsx/latest/APIReference/API_CopyBackup.html) API operation to copy a backup within the same Amazon account, either across an Amazon Region or within an Amazon Region.

  The following command copies a backup with an ID of `backup-0abc123456789cba7` from the `us-east-1` Region.

  ```
  aws fsx copy-backup \
    --source-backup-id backup-0abc123456789cba7 \
    --source-region us-east-1
  ```

  The response shows the description of the copied backup.

   You can view your backups on the Amazon FSx console or programmatically using the `describe-backups` CLI command or the [DescribeBackups](https://docs.amazonaws.cn/fsx/latest/APIReference/API_DescribeBackups.html) API operation.

------