Dell PowerProtect Cyber Recovery 19.13 AWS Deployment Guide

The Cyber Recovery vault on AWS

The Cyber Recovery software manages a virtual air gap between a production environment and the Cyber Recovery vault. It disables replication links and replication ports on the DD system in the Cyber Recovery vault when Cyber Recovery policies are idle. The software enables and disables access to both a private subnet and DDVE in the Cyber Recovery vault, which are installed during the solution deployment, through security groups and ACLs.

When a policy runs, the Cyber Recovery software enables the flow of data into the Cyber Recovery vault by enabling both the replication link and the replication port of the DD system. When a policy finishes synchronizing data into the Cyber Recovery vault using the replication link, the Cyber Recovery software disables the replication link. Also, when all policies no longer use a specific DD port to synchronize data into the Cyber Recovery vault, the Cyber Recovery software disables the port by bringing down the interface.

Amazon Web Services (AWS) provides virtual public cloud (VPC) security mechanisms that provide additional security measures for the Cyber Recovery vault:

• Security groups, which protect the instances deployed in the VPC
• Network ACLs

The Cyber Recovery software enables and disables access to a private subnet through a network access control list (network ACL) and enables and disables access to an instance through security groups.