Acronis Cyber Protect Cloud With Wasabi

How do I use Acronis Cyber Protect Cloud with Wasabi?

Acronis Cyber Protect Cloud represents an all-in-one cyber protection solution that integrates backup and recovery, disaster recovery, malware prevention, security controls, remote assistance, monitoring, and reporting. Wasabi can now be used as a destination for the Cyber Protect backups.

Prerequisites

• An active Acronis Cyber Protect Cloud account to access Cyber Protection Service.
  • If you are an Acronis partner, create accounts for your customers.
  • If you are a customer of an Acronis partner, you will receive the user account from your partner.
  • Have Cyber Administrator, User, or Company Administrator access. 
• A Wasabi Cloud Storage account.

Reference Architecture

Access Requirements Needed to Backup to Wasabi

To define a Wasabi bucket as a backup location, there are a few requirements that need to be considered.

• A Wasabi Bucket needs to be created.
• A user with relevant policies needs to be created. 

For security purposes, root user access keys cannot be used to define a backup location in Acronis. A user with relevant policies should be created. The credentials of this user will be used to define the Backup Location in Acronis.

The sections below outline the steps to fulfill the access requirements needed to create a Wasabi backup location in Acronis.

Bucket Creation

Create a bucket. For more information, review Creating a Bucket.

Policy Permissions

This section provides examples of the access policies that can be used. Using one of the examples, create a policy to be applied to the user. For more information, review Creating a Policy.

Example 1

This policy gives the user the minimum set of permissions to a wide scope of resources. 

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:ListAllMyBuckets",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "s3:GetBucketLocation",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "iam:CreateRole",
        "iam:AttachRolePolicy",
        "sts:GetCallerIdentity",
        "sts:AssumeRole"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "s3:ListBucket",
      "Resource": "*"
    }
  ]
}

Example 2

This policy gives the user the minimum set of permissions to a specific bucket.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:ListAllMyBuckets",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "s3:GetBucketLocation",
      "Resource": "arn:aws:s3:::[BUCKETNAME]"
    },
    {
      "Effect": "Allow",
      "Action": [
        "iam:CreateRole",
        "iam:AttachRolePolicy",
        "sts:GetCallerIdentity",
        "sts:AssumeRole"
      ],
      "Resource": "arn:aws:iam::[ACCOUNTID]:*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Resource": "arn:aws:s3:::[BUCKETNAME]/*"
    },
    {
      "Effect": "Allow",
      "Action": "s3:ListBucket",
      "Resource": "arn:aws:s3:::[BUCKETNAME]"
    }
  ]
}

Creating a User 

Create a user with programmatic (create API key) access and apply the policy created above to the user. For more detail, refer to Creating a User.

Now, proceed to create the backup location in Acronis Cyber Protect console.

Creating a Backup Location in Acronis Cyber Protect Console

1. Log into the Acronis Cyber Protect console. Click Backup Storage.

   

2. In the Backup Storage tab, click +Add Location.

   

3. Navigate to Public cloud and select Wasabi from the drop-down menu.

   

4. Click Add new connection.

   

5. In the Wasabi connection dialog box, provide the following details and click Connect.

   Connection name: A name for a Wasabi connection (Wasabi-2 is used in the example below).

   Access key ID: The access key of the Wasabi user created above in Access requirements needed to backup to Wasabi. 

   Access key: The secret access key of the Wasabi user created above in Access requirements needed to backup to Wasabi.

   

6. The Wasabi connection created in the previous step is populated in the S3-compatible connection field. Provide a Location name (Wasabi central is used in this example) and select the bucket, created above in Access requirements needed to backup to Wasabi, from the Buckets drop-down menu. You can use the search bar to search for the bucket. Click Add.

   

7. The Locations page will display the newly added location.

   

Next, create a Protection plan with Wasabi storage or edit an existing plan to add Wasabi as the storage destination. 

Creating a Protection Plan With a Wasabi Location

1. Navigate to Devices --> All devices.

   

2. Select the required device. Click Protect.

   

3. Click Create plan to expand the menu. Click Protection.

   

4. Provide a name for the Backup plan and click Where to backup to configure Wasabi as the backup destination.

   

5. Select the Wasabi location created in Creating a Backup Location in Acronis Cyber Protect Console.

   

6. Configure the other fields as desired. Confirm the backup destination is Wasabi storage and click Create.

   

7. The protection plan with Wasabi storage will be created and assigned to the device.

   

The backups of this device will be stored in Wasabi cloud storage.

Assigning the Wasabi Location to an Existing Protection Plan

1. To assign the Wasabi location created earlier to a protection plan, navigate to Management --> Protection Plans. Select the desired protection plan and click Edit.

   

2. In the Details dialog box, click Where to back up.

   

3. In the Where to back up dialog box, select the Wasabi location created in Creating a Backup Location in Acronis Cyber Protect Console.

   

4. Confirm that the Where to back up field displays the added location. Click Save.

   

The backups of the devices assigned to this protection plan will be stored in Wasabi cloud storage.