Managing Backup and Restoration

Prerequisites

• The database audit instance is in the Running state.
• For details about how to enable database audit, see Enable Database Audit.
• If a user has the Security Administrator permission of IAM, DBSS automatically grants authorization permissions for the user. Users who lack this permission must have an IAM Security Administrator manually create and grant it to them. For details, see OBS Fine-grained Authorization.

Managing Backup and Restoration

1. Log in to the DBSS console.
2. Click in the upper left corner on the displayed page and select a region.
3. In the navigation tree on the left, choose Settings.
4. In the Instance drop-down list, select an instance to configure alarm notifications.
5. Click the Backup and Restoration tab page.

OBS Fine-grained Authorization

DBSS backup and restoration require OBS permissions. Users without IAM authorization permissions must be manually authorized by a user having the Security Administrator permission.

1. Log in to the management console.
2. Select a region, click in the upper left corner, and choose Management & Governance > Identity and Access Management.
3. In the navigation pane, choose Permissions > Authorization. Click Create Custom Policy.
4. Configure policy parameters. Set Policy Name to DBSS OBS Agency Access. Set Policy View to JSON. The policy content is as follows:

   {
       "Version": "1.1",
       "Statement": [
           {
               "Effect": "Allow",
               "Action": [
                   "obs:object:PutObjectVersionAcl",
                   "obs:object:PutObjectAcl",
                   "obs:object:GetObjectVersion",
                   "obs:object:GetObject",
                   "obs:object:GetObjectVersionAcl",
                   "obs:bucket:HeadBucket",
                   "obs:object:GetObjectAcl",
                   "obs:bucket:CreateBucket",
                   "obs:bucket:ListBucket",
                   "obs:object:PutObject"
               ],
               "Resource": [
                   "OBS:*:*:object:*",
                   "OBS:*:*:bucket:OBS_Bucket_Name_1",
                   "OBS:*:*:bucket:OBS_bucket_2" //You can add multiple buckets.
               ]
           }
       ]
   }

   See Figure 5. Click OK.

   Figure 5 Creating a custom policy
   

5. In the navigation pane, choose Agencies and then click Create Agency in the upper right corner.
6. Configure agency parameters. Set Agency Name to dbss_depend_obs_trust. Set Agency Type to Cloud service. Set Cloud Service to DBSS. See Figure 6.
   Figure 6 Creating an agency
   

7. Click Next. Select the custom policy created in 4, and add the permission DBSS OBS Agency Access to the agency dbss_depend_obs_trust, as shown in Figure 7. Click Next in the lower right corner.
   Figure 7 Selecting a policy
   

8. Set Scope to All resources and click OK. If the message in Figure 8 is displayed, the authorization is successful. Click Finish. The authorization will take effect in about 15 minutes.
   Figure 8 Authorization completed
   

References

• For details about audit log storage, see How Long Is the Audit Data of Database Audit Stored by Default?
• For details about how to download audit logs, see Can I Download the Backed Up Database Audit Logs?
• If the backup hangs while uploading the backup file, troubleshoot the issue by referring to Backup Gets Stuck at the Backup File Uploading Phase.
• If the automatic backup fails and the failure code is "Export backup file failed", troubleshoot the issue by referring to DBSS Automatic Backup Failed and The Failure Code is "Export backup file failed".