Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products

PowerProtect Data Manager 19.9 Amazon Web Services Deployment Guide

Architecture overview

PowerProtect Data Manager is deployed with a private IP address. For access from an external site, configure a VPN gateway.

The following diagram represents the basic architecture of PowerProtect Data Manager on AWS. The diagram shows a single region, single Virtual Private Cloud (VPC), and single availability zone (AZ).

Figure 1. Basic PowerProtect Data Manager architecture
Basic PowerProtect Data Manager architecture

Sensitive PowerProtect Data Manager data, such as passwords, is encrypted and stored in a lockbox. For more information about PowerProtect Data Manager security, see the PowerProtect Data Manager Security Configuration Guide at Customer Support. When deployed to AWS, the PowerProtect Data Manager lockbox is located in a secure Elastic Block Store (EBS) volume.

Backup data is stored in a Simple Storage Services (S3) bucket, and the backup metadata is stored on a DDVE EBS volume. For more information, see the PowerProtect DD Virtual Edition in Amazon Web Services Installation and Administration Guide at Customer Support.

DDVE and a single availability zone

To minimize data-transfer costs, application hosts and DDVE can be located in the same AZ.

Figure 2. PowerProtect Data Manager and DDVE in a single AZ
PowerProtect Data Manager and DDVE in a single AZ

DDVE and multiple availability zones

If application hosts are distributed across more than one AZ, you can minimize data-transfer costs by installing a separate instance of DDVE in each AZ.

NOTE To deploy additional instances of DDVE to AWS outside of the PowerProtect Data Manager deployment process, see the PowerProtect DD Virtual Edition in Amazon Web Services Installation and Administration Guide at Customer Support
Figure 3. PowerProtect Data Manager and DDVE in two AZs
PowerProtect Data Manager and DDVE in two AZs

DDVE and multiple availability zones with only a single DDVE instance

If application hosts are distributed across more than one availability zone, but a DDVE instance exists in only one of the AZs, additional data-transfer costs will be incurred.

Figure 4. PowerProtect Data Manager and a single DDVE instance for two AZs
PowerProtect Data Manager and a single DDVE instance for two AZs

PowerProtect Data Manager policies and DDVE

If a different DDVE instance is in each AZ or region, ensure that PowerProtect Data Manager policies are configured to protect all the hosts in the same AZ or region as each DDVE instance.


  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\