Recovery of a cross-account DR copy of encrypted RDS snapshots

• Related Articles

• EBS/RDS DR & Recovery with KMS key

  When copying cross account an EBS/RDS Volume encrypted with custom KMS, a KMS key should also be available in the other account. There are 2 ways that CPM uses for checking KMS key - Alias & Tag KMS Tag When using custom tag, you are telling CPM to ...

• Cross-Account and Cross-Region DR of an encrypted RDS database may fail

  If cross-region and cross-account backup of an encrypted RDS database is successful, but fails in the cross-region cross-account DR copy, you may see the following error in the cpm logs: ERROR: start_copy_region(dr_rds.py:381) RDS DR copy_snapshot ...

• RDS Cross Region DR fails with Exception: Cannot copy more than 5 snapshots across regions

  You may see the following errors in the CPM logs when cross region RDS DR copies fail to successfully copy to the DR region. ERROR:  cpm_copy_dbsnapshot(aws_rds_utils.py:217)  Exception: Cannot copy more than 5 snapshots across regions ...

• Cross account recovery of encrypted volumes may fail

  A cross account recovery of an encrypted snapshot may fail with this error: Encrypted snapshots can only create volumes in the owner's account Please upgrade to latest 2.X.X version to resolve the issue. Reference defect number - 6676511295, fixed in ...

• Cross-region DR copy of encrypted snapshot may fail with "Copy failed due to an AWS limitation regarding default encryption key” error

  DR of encrypted snapshots may fail with the following error in the Backup log: Error - <DR Policy>, copy snapshot failed (in Backup account) due to an AWS limitation regarding default encryption key source <source region>, target <target region>, ...