Can you share RDS snapshot between accounts?

Can you share RDS snapshot between accounts?

To share an encrypted Amazon RDS DB snapshot: Add the target account to a custom (non-default) KMS key. Copy the snapshot using the customer managed key, and then share the snapshot with the target account. Copy the shared DB snapshot from the target account.

How do I share a snapshot with another AWS account?

Make the snapshot public or share it with specific AWS accounts as follows:

  1. To make the snapshot public, choose Public.
  2. To share the snapshot with one or more AWS accounts, choose Private, enter the AWS account ID (without hyphens) in AWS Account Number, and choose Add Permission. Repeat for any additional AWS accounts.

Where are RDS Snapshots stored?

S3
Amazon RDS DB snapshots and automated backups are stored in S3. You can use the AWS Management Console, the ModifyDBInstance API, or the modify-db-instance command to manage the period of time your automated backups are retained by modifying the RetentionPeriod parameter.

How do I restore RDS Snapshots to New RDS?

To restore a DB instance from a DB snapshot Sign in to the AWS Management Console and open the Amazon RDS console at https://console.aws.amazon.com/rds/ . In the navigation pane, choose Snapshots. Choose the DB snapshot that you want to restore from. For Actions, choose Restore snapshot.

Can you share RDS snapshots with another AWS account?

Snapshots that use the default RDS encryption key (aws/rds) can be shared, but you must first copy the snapshot and choose a custom encryption key. Then, you can share the custom key and the copied snapshot. Snapshots can be shared across AWS Regions.

How to create RDS snapshots in source region?

In the source account, source region, we use a scheduled CloudWatch event to trigger a Lambda function to create a manual snapshot automatically. Then we use an RDS event to capture the snapshot copied event and copy the new snapshot to DR region (source account).

Can a shared snapshot be restored from the destination account?

Shared encrypted snapshots can’t be restored directly from the destination account. First, copy the snapshot to the destination account by using a KMS key in the destination account. Then, share the copied snapshot.

Can you share an encrypted manual snapshot on Amazon?

Encrypted manual snapshots that don’t use the default Amazon RDS encryption key can be shared, but you must first share the AWS Key Management Service (AWS KMS) key with the account that you want to share the snapshot with.