FlashBlade with Portworx Backup

Portworx Backup supports FlashBlade as backend on-premises storage infrastructure. Portworx Backup enables you to add an S3 bucket on FlashBlade as a backup target.

Prerequisites

1. Add a policy in FlashBlade console:

   • For a non-object locked bucket, add a policy in the console with the below permissions enabled:

     Bucket permissions	Object permissions
     s3:createBucket s3:GetBucketAcl s3:ListAllMyBuckets s3:ListBucket s3:ListBucketMultipartUploads s3:ListBucketVersions s3:PutBucketVersioning s3:GetLifecycleConfiguration s3:PutLifecycleConfiguration	s3:GetObject s3:GetObjectAcl s3:GetObjectLockConfiguration s3:GetObjectTagging s3:GetObjectVersion s3:GetObjectVersionTagging s3:PutObject s3:DeleteObject s3:ListMultipartUploadParts s3:AbortMultipartUpload

   • For an object-locked bucket, create a policy in FlashBlade console with the following permissions enabled in the table above:

     Bucket permissions	Object permissions
     s3:GetBucketAcl s3:ListAllMyBuckets s3:ListBucket s3:ListBucketMultipartUploads s3:ListBucketVersions s3:PutLifecycleConfiguration	s3:GetObject s3:GetObjectAcl s3:GetObjectLegalHold s3:GetObjectRetention s3:GetObjectLockConfiguration s3:GetObjectTagging s3:GetObjectVersion s3:GetObjectVersionTagging s3:putObject s3:PutObjectLegalHold s3:PutObjectLockConfiguration s3:PutObjectRetention s3:DeleteObject s3:ListMultipartUploadParts s3:AbortMultipartUpload

2. Map the created policy with a FlashBlade user.
3. Generate the access keys.

Now you can add the FlashBlade-based object-locked or non-object locked bucket(s) as a backup location target in Portworx Backup.

Add FlashBlade Backup location

• Make sure you have populated all the data under AWS users in Step 3 of Add object store backup location and then add the backup location.

---

Last edited: Friday, Sep 15, 2023
Questions? Visit the Portworx forum.