Notifications
This section will help you understand the logic on the notifications about backup executions.
Topics
Overview
Backup offers the possibility to send backup status information to an SNS Topic so that the information can be sent to any email, sms or third-party tool subscribed to it.
Notification parameters can also be found in the emory configuration file with the following format:
_10Notificator:_10 active: true_10 SNSArn: arn:aws:sns:us-east-2:123456789012:MyTopic
Prerequisites
Create a SNS Topic
Before you can start working with the backup notifications you will need to create an SNS Topic in your AWS Account. To do so, follow these guidelines based on the AWS Documentation https://docs.aws.amazon.com/sns/latest/dg/sns-create-topic.html:
-
Sign in to the Amazon SNS console.
-
Do one of the following:
- If no topics have ever been created under your AWS account before, read the description of Amazon SNS on the home page.
- If topics have been created under your AWS account before, on the navigation panel, choose Topics.
-
On the Topics page, choose Create topic.
-
On the Create topic page, in the Details section, do the following:
- For Type, choose a topic type (Standard or FIFO).
- Enter a Name for the topic. For a FIFO topic, add .fifo to the end of the name.
- (Optional) Enter a Display name for the topic.
- (Optional) For a FIFO topic, you can choose content-based message deduplication to enable default message deduplication. For more information, see Message deduplication for FIFO topics.
-
(Optional) Expand the Encryption section and do the following. For more information, see Encryption at rest.
-
Choose Enable encryption.
-
Specify the customer master key (CMK). For more information, see Key terms. For each CMK type, the Description, Account, and CMK ARN are displayed.
ImportantIf you aren't the owner of the CMK, or if you log in with an account that doesn't have the kms:ListAliases and kms:DescribeKey permissions, you won't be able to view information about the CMK on the Amazon SNS console.
Ask the owner of the CMK to grant you these permissions. For more information, see the AWS KMS API Permissions: Actions and Resources Reference in the AWS Key Management Service Developer Guide.
-
The AWS managed CMK for Amazon SNS (Default) alias/aws/sns is selected by default.
NoteKeep the following in mind:
-
The first time you use the AWS Management Console to specify the AWS managed CMK for Amazon SNS for a topic, AWS KMS creates the AWS managed CMK for Amazon SNS.
-
Alternatively, the first time you use the Publish action on a topic with SSE enabled, AWS KMS creates the AWS managed CMK for Amazon SNS.
-
-
To use a custom CMK from your AWS account, choose the Customer master key (CMK) field and then choose the custom CMK from the list.
NoteFor instructions on creating custom CMKs, see Creating Keys in the AWS Key Management Service Developer Guide
-
To use a custom CMK ARN from your AWS account or from another AWS account, enter it into the Customer master key (CMK) field.
-
-
-
(Optional) By default, only the topic owner can publish or subscribe to the topic. To configure additional access permissions, expand the Access policy section. For more information, see Identity and access management in Amazon SNS and Example cases for Amazon SNS access control.
NoteWhen you create a topic using the console, the default policy uses the aws:SourceOwner condition key. This key is similar to aws:SourceAccount.
-
(Optional) To configure how Amazon SNS retries failed message delivery attempts, expand the Delivery retry policy (HTTP/S) section. For more information, see Amazon SNS message delivery retries.
-
(Optional) To configure how Amazon SNS logs the delivery of messages to CloudWatch, expand the Delivery status logging section. For more information, see Amazon SNS message delivery status.
-
(Optional) To add metadata tags to the topic, expand the Tags section, enter a Key and a Value (optional) and choose Add tag. For more information, see Configuring tags for an Amazon SNS topic.
-
Choose Create topic.
The topic is created and the MyTopic page is displayed.
The topic's Name, ARN, (optional) Display name, and Topic owner's AWS account ID are displayed in the Details section.
-
Copy the topic ARN to the clipboard, for example:
arn:aws:sns:us-east-2:123456789012:MyTopic
Add IAM Policy with permissions to access the SNS Topic
Your SAP server must have permission to at least the following actions:
- sns:Publish
Use this example as a template to add the permissions if needed:
_11{_11 "Version": "2012-10-17",_11 "Statement": [_11 {_11 "Sid": "VisualEditor0",_11 "Effect": "Allow",_11 "Action": "sns:Publish",_11 "Resource": "arn:aws:sns:eu-west-1:${AWS::AccountId}:<sns_topic_arn>"_11 }_11 ]_11}
Enable notifications
To be able to send this information to a subscribed service you will need to follow this steps:
-
Open the configuration wizard as SAP Database Administrator user:
_10/opt/emory/emory -
Select Monitoring from the main menu:
_18? CxLink Backup: [Use arrows to move, enter to select, type to filter]_18--------------------------------------------------------------------------------_18Storage Providers profiles_18Set storage providers for backup/restore, disaster recovery and system copy_18Backups Lifecycle settings_18> Monitoring_18--------------------------------------------------------------------------------_18License_18--------------------------------------------------------------------------------_18Logging file settings_18Debug traces_18Show relevant information of this CxLink Backup_18--------------------------------------------------------------------------------_18Catalog & Backups management_18--------------------------------------------------------------------------------_18Generate troubleshooting package to be sent to Syntax Support_18--------------------------------------------------------------------------------_18Exit -
Select External endpoint notification (AWS SNS Service):
_10? CxLink Backup: Monitoring_10? Select : [Use arrows to move, enter to select, type to filter]_10Syntax Dashboard notification_10Local monitoring_10> External endpoint notification (AWS SNS Service)_10Back -
Select Enable external endpoint monitoring:
_10? CxLink Backup: Monitoring_10? Select : External endpoint notification (AWS SNS Service)_10? Select : [Use arrows to move, enter to select, type to filter]_10> Enable external endpoint monitoring_10Back -
Select Set AWS SNS Endpoint:
_10? CxLink Backup: Monitoring_10? Select : External endpoint notification (AWS SNS Service)_10? Select : Enable external endpoint monitoring_10? Select : [Use arrows to move, enter to select, type to filter]_10> Set AWS SNS Endpoint_10Disable external endpoint monitoring_10Back -
Fill profile name from your AWS credentials file if one has to be used or leave it empty to access using instance service role, role ARN if role has to be assumed, region and AWS SNS Topic ARN to be used from the list:
_10? CxLink Backup: Monitoring_10? Select : External endpoint notification (AWS SNS Service)_10? Select : Enable external endpoint monitoring_10? Select : Set AWS SNS Endpoint_10? AWS command line profile name: default_10? AssumeRole Arn:_10? AWS Region: eu-west-1_10? AWS SNS Topic ARN: [Use arrows to move, enter to select, type to filter, ? for more help]_10> arn:aws:sns:eu-west-1:742189430206:AWSemory.fifo_10arn:aws:sns:eu-west-1:742189430206:AWSemory_Demo -
You can now select Return and Exit to save the configuration if no other action should be taken.
Disable notifications
To be able to send this information to a subscribed service you will need to follow this steps:
-
Open the configuration wizard as SAP Database Administrator user:
_10/opt/emory/emory -
Select Monitoring from the main menu:
_18? CxLink Backup: [Use arrows to move, enter to select, type to filter]_18--------------------------------------------------------------------------------_18Storage Providers profiles_18Set storage providers for backup/restore, disaster recovery and system copy_18Backups Lifecycle settings_18> Monitoring_18--------------------------------------------------------------------------------_18License_18--------------------------------------------------------------------------------_18Logging file settings_18Debug traces_18Show relevant information of this CxLink Backup_18--------------------------------------------------------------------------------_18Catalog & Backups management_18--------------------------------------------------------------------------------_18Generate troubleshooting package to be sent to Syntax Support_18--------------------------------------------------------------------------------_18Exit -
Select External endpoint notification (AWS SNS Service):
_10? CxLink Backup: Monitoring_10? Select : [Use arrows to move, enter to select, type to filter]_10Syntax Dashboard notification_10Local monitoring_10> External endpoint notification (AWS SNS Service)_10Back -
Select Disable external endpoint monitoring:
_10? CxLink Backup: Monitoring_10? Select : External endpoint notification (AWS SNS Service)_10? Select : [Use arrows to move, enter to select, type to filter]_10> Disable external endpoint monitoring_10Back -
You can now select Return and Exit to save the configuration if no other action should be taken.