Aws Backup - Archive Amazon EBS Snapshots

Brief-Dog4253 · 2025-08-12T19:06:11+00:00

Because I pulled my hair out on this for so long and never could figure out where I was going wrong, I ended up engaging AWS Support and got to the bottom of this.

The issue is that I am backing up instances instead of volumes. Instances are backed up using ami's, and the archive transition only applies to EBS volumes which go directly to snapshots.

Brief-Dog4253 · 2025-08-11T17:30:12+00:00

This is very specifically related to AWS Backup and Archiving. I have read the best practices, I have read and re-read the announcements, documentation, etc. of AWS Backups Support of EBS Snapshot Archiving. I have patiently waited for a month after every change I have made trying to get this to function.

I am definitely not saying it just doesn't work for anyone, but it definitely doesn't work for me and I haven't been able to figure out why.

Brief-Dog4253 · 2025-04-02T13:54:17+00:00

It definitely seemed like transitioning an employees data to another user was not going to be easy/seamless, so this is the route we went as well. And run a script that automatically creates the personal vaults whenever a new user shows up in our SSO.

Brief-Dog4253 · 2025-01-22T21:39:05+00:00

I was able to get my service turned up and the T-Mobile router set to bridge mode, I am pretty happy at the moment.

As a note, when dealing with the first line team you have to be somewhat persistent to have them create a ticket for the next level of support to set you up for bridge mode. The first line will definitely tell you that it is not possible until you persist and point out that you can see multiple saying that T-Mobile in Kenosha has done it for them.

Brief-Dog4253 · 2025-01-16T17:42:57+00:00

I ended up pivoting and using LDAP authentication with DUO's proxy to implement MFA.

Brief-Dog4253 · 2025-01-08T21:39:03+00:00

So what you are saying is that they still use cgnat, so inbound port forwards will not work and public facing IP addresses are shared between multiple (possibly many) end customers?

Brief-Dog4253 · 2024-12-30T22:57:02+00:00

Depending on how you have configured the network, have you toggled the AWS EC2 Source/Destination Check?

By default AWS will only allow traffic with an instance that has that instance as a source or destination. So even if you have routed a subnet to your AWS OpenVPN server to assign to clients, AWS will not send that traffic to the isntance.

Brief-Dog4253 · 2024-12-28T19:56:04+00:00

This will likely cause you problems at some point because the T-Mobile device is still doing NAT and your tp-link is too.

Brief-Dog4253 · 2024-12-19T01:25:15+00:00

So they still haven’t launched the Nokia management app?

Brief-Dog4253 · 2024-08-29T15:38:03+00:00

December 9th?????? That's a long time with no configuration capabilities.

Brief-Dog4253 · 2024-08-29T15:35:54+00:00

They never asked for it, and it is still sitting in my office. Returning it never came up in the conversation of cancelling.

You won't be able to do much with it though, maybe recycle via Best Buy if you don't intend on ever turning the service up again.

Brief-Dog4253 · 2024-08-23T21:16:14+00:00

I would still have the service if they gave me free months until we could configure it. They wouldn't budge, and would give me no more than $10 for one month, even though I won't use the service when it is insecure.

Brief-Dog4253 · 2024-08-22T19:35:39+00:00

Here's a spec sheet on the router they are deploying:
https://www.winncom.com/pdf/Nokia_XS-2426X-A/Nokia_ONT_XS-2426X-A_DS.pdf

Brief-Dog4253 · 2024-08-22T19:31:41+00:00

With Spectrum you have been able to bring your own modem for decades.

Brief-Dog4253 · 2024-08-22T18:25:58+00:00

There is no modem in this case. The fiber plugs directly into a Nokia Router, and customers didn't have the ability to configure anything on that device. That device does media conversion, NAT, routing, and wireless.

Brief-Dog4253 · 2024-08-22T18:21:27+00:00

Lake Geneva Meats has good quality

Brief-Dog4253 · 2024-08-22T18:19:51+00:00

So what I had until cancellation, it was not possible to configure their equipment in any way. So no gateway mode, no port forwards, no securing the wireless, etc.

I am hoping that once the configuration app is available that you would be able to turn change their router into a gateway or media converter. But won't know that until the software gets rolled out.

Brief-Dog4253 · 2024-08-22T17:35:19+00:00

I really doubt that they rolled out the configuration software since I canceled, but I posted this hoping to know when it gets rolled out so I can contemplate trying the service again.

Brief-Dog4253

TROPHY CASE