Table: aws_backup_protected_resource - Query AWS Backup Protected Resources using SQL

AWS Backup Protected Resources are the critical data, system configurations, and applications that are safeguarded by AWS Backup. This service provides a fully managed, policy-based backup solution, simplifying the process of backing up data across AWS services. It offers a centralized place to manage backups, audit and monitor activities, and apply retention policies, thus enhancing data protection and compliance.

Table Usage Guide

The aws_backup_protected_resource table in Steampipe provides you with information about the resources that are backed up by AWS Backup service. This table allows you, as a DevOps engineer, security analyst, or system administrator, to query resource-specific details, including resource ARN, type, backup plan ID, and the last backup time. You can utilize this table to gather insights on backed up resources, such as retrieving the last backup time, identifying resources that are not backed up, verifying the backup plan associated with each resource, and more. The schema outlines the various attributes of the backed up resource, including the resource ARN, resource type, backup plan ID, and last backup time for you.

Examples

Basic Info

Discover the segments that are protected by AWS Backup service and when they were last backed up. This is useful for maintaining data recovery readiness and ensuring that critical resources are sufficiently protected.

select
  resource_arn,
  resource_type,
  last_backup_time
from
  aws_backup_protected_resource;

select
  resource_arn,
  resource_type,
  last_backup_time
from
  aws_backup_protected_resource;

List EBS volumes that are backed up

Determine the areas in which EBS volumes are backed up, allowing you to understand the reach of your backup strategy and ensure no critical data is left unprotected.

select
  resource_arn,
  resource_type,
  last_backup_time
from
  aws_backup_protected_resource
where
  resource_type = 'EBS';

select
  resource_arn,
  resource_type,
  last_backup_time
from
  aws_backup_protected_resource
where
  resource_type = 'EBS';

Control examples

Schema for aws_backup_protected_resource

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_id	text	=, !=, ~~, ~~, !~~, !~~	The AWS Account ID in which the resource is located.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
last_backup_time	timestamp with time zone		The date and time a resource was last backed up.
last_backup_vault_arn	text		This is the ARN (Amazon Resource Name) of the backup vault that contains the most recent backup recovery point.
last_recovery_point_arn	text		This is the ARN (Amazon Resource Name) of the most recent recovery point.
latest_restore_execution_time_minutes	bigint		This is the time in minutes the most recent restore job took to complete.
latest_restore_job_creation_date	timestamp with time zone		This is the creation date of the most recent restore job.
latest_restore_recovery_point_creation_date	timestamp with time zone		This is the date the most recent recovery point was created.
partition	text		The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text		The AWS Region in which the resource is located.
resource_arn	text	=	An Amazon Resource Name (ARN) that uniquely identifies a resource.
resource_name	text		This is the non-unique name of the resource that belongs to the specified backup.
resource_type	text		The type of Amazon Web Services resource.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_backup_protected_resource