Protection of virtual private cloud configurations
The methods and systems described herein provide a solution for protecting configuration data associated with a virtual private cloud. Network configurations, accounts, and/or security data may be collected from the host of the virtual private network using APIs provided by the host. The point-in-time configuration information of a VPC can be used in disaster recovery, migration to a new VPC host, or manage VPC configurations across accounts and regions. During a backup operation of a computing resource within a VPC, one or more processes requests security, network, and/or gateway configuration information from the VPC host. This information may be collected and requested for the entire VPC topology. The VPC configuration information, in the format/output received from the VPC host, is then backed up and stored with the backup of that computing resource in secondary storage.
1. A computer-implemented system for backing up a virtual machine within a virtual private cloud environment, the computer-implemented system comprising:
one or more processors configured to:
receive or identify a request to perform a backup of a virtual machine hosted within a virtual private cloud,
create a backup copy of the virtual machine;
request, from a host of the virtual private cloud, all virtual private cloud configuration information available to be retrieved using API resources provided by the host of the virtual private cloud,
wherein the virtual private cloud configuration information comprises of network and security configurations such that the virtual private cloud configuration information is sufficient to recreate the virtual private cloud;
receive the virtual private cloud configuration information in format native to the host of the virtual private cloud;
store the backup copy of the virtual machine and the received virtual private cloud configuration information in one or more secondary storage devices;
restore the backup copy of the virtual machine and the virtual private cloud configuration information from the one or more secondary storage devices;
determine that a network entity within the virtual private cloud that the virtual machine is associated with is no longer available; and
using the virtual private cloud configuration information stored within the one or more secondary storage devices, request the host of the virtual private cloud to recreate the network entity within the virtual private cloud.
2. A computer-implemented system of claim 1 , wherein the one or more processors is further configured to: duplicate the virtual private cloud configuration information stored in one or more secondary storage devices to create a second copy of the virtual private cloud configuration information.
3. A computer-implemented system of claim 1 , wherein the one or more processors is further configured to:
receive a request to restore the backup copy of the virtual machine and the virtual private cloud configuration information in the one or more secondary storage devices;
in response to determining that the virtual private cloud associated with the backup copy of the virtual machine is no longer available, submit the virtual private cloud configuration information stored with the backup copy of the virtual machine to a virtual cloud environment to create a virtual private cloud; and
restore the virtual machine to the created virtual private cloud.
4. A computer-implemented system of claim 1 , wherein the one or more processors is further configured to:
receive a request to access the virtual private cloud configuration information stored within the one or more secondary storage devices;
initiate a request to restore the virtual private cloud configuration information stored within the one or more secondary storage devices.
5. A computer-implemented system of claim 1 , wherein the virtual private cloud configuration information stored comprises information regarding accounts that have access to the virtual private cloud.
6. A computer-implemented system of claim 1 , wherein the virtual private cloud comprises several network zones.
7. A computer-implemented system of claim 1 , wherein the virtual private cloud comprises private and public subnets.
8. A computer-implemented method for backing up a virtual machine within a virtual private cloud environment, the method comprising:
receiving or identifying a request to perform a backup of a virtual machine hosted within a virtual private cloud;
creating a backup copy of the virtual machine;
requesting, from a host of the virtual private cloud, all virtual private cloud configuration information available to be retrieved using API resources provided by the host;
receiving the virtual private cloud configuration information in a format native to the host of the virtual private cloud;
storing the backup copy and the virtual private cloud configuration information in one or more secondary storage devices;
restoring the backup copy of the virtual machine and the virtual private cloud configuration information from the one or more secondary storage devices;
determining that a network entity within the virtual private cloud that the virtual machine is associated with is no longer available; and
using the virtual private cloud configuration information stored within the one or more secondary storage devices, requesting the host of the virtual private cloud to recreate the network entity within the virtual private cloud.
9. The method of claim 8 , further comprising duplicating the virtual private cloud configuration information stored in one or more secondary storage devices to create a second copy of the virtual private cloud configuration information.
10. The method of claim 8 , further comprising:
receiving a request to restore the backup copy of the virtual machine and the virtual private cloud configuration information from the one or more secondary storage devices;
in response to determining that the virtual private cloud associated with the backup copy of the virtual machine is no longer available, submitting the virtual private cloud configuration information to a virtual cloud environment to create a new virtual private cloud; and
restoring the virtual machine to the created virtual private cloud.
11. The method of claim 8 , further comprising:
receiving a request to access the virtual private cloud configuration information stored within the one or more secondary storage devices; and
initiating a request to restore the virtual private cloud configuration information stored within the one or more secondary storage devices.
12. The method of claim 8 , wherein the virtual private cloud configuration information stored comprises information regarding accounts that have access to the virtual private cloud.
13. The method of claim 8 , wherein the virtual private cloud comprises several network zones.
14. The method of claim 8 , wherein the virtual private cloud comprises private and public subnets.