About Azure Database for PostgreSQL - Flexible server backup (preview)
Azure Backup and Azure Database Services have come together to build an enterprise-class backup solution for Azure Database for PostgreSQL servers that retains backups for up to 10 years. The feature offers the following capabilities:
- You can extend your backup retention beyond 35 days which is the maximum supported limit by the operational tier backup capability of PostgreSQL flexible database. Learn more.
- The backups are copied to an isolated storage environment outside of customer tenant and subscription, thus providing protection against ransomware attacks.
- Azure Backup provides enhanced backup resiliency by protecting the source data from different levels of data loss ranging from accidental deletion to ransomware attacks.
- The zero-infrastructure solution with Azure Backup service managing the backups with automated retention and backup scheduling.
- Central monitoring of all operations and jobs via backup center.
Backup flow
To perform the backup operation:
- Grant permissions to the backup vault MSI on the target ARM resource (PostgreSQL-Flexible server), establishing access, and control.
- Configure backup policies, specify scheduling, retention, and other parameters.
Once the configuration is complete:
- The Backup service invokes the backup based on the policy schedules on the ARM API of PostgresFlex server, writing data to a secure blob-container with a SAS for enhanced security.
- Backup runs independently preventing disruptions during long-running tasks.
- The retention and recovery point lifecycles align with the backup policies for effective management.
- During the restore, the Backup service invokes restore on the ARM API of PostgresFlex server using the SAS for asynchronous, nondisruptive recovery.
Azure Backup authentication with the PostgreSQL server
The Azure Backup service needs to connect to the Azure PostgreSQL Flexible server while taking each backup.
Permissions for backup
For successful backup operations, the vault MSI needs the following permissions:
- Restore: Storage Blob Data Contributor role on the target storage account.
- Backup:
- PostgreSQL Flexible Server Long Term Retention Backup role on the server.
- Reader role on the resource group of the server.
Understand pricing
You incur charges for:
Protected instance fee: Azure Backup for PostgreSQL - Flexible servers charges a protected instance fee as per the size of the database. When you configure backup for a PostgreSQL Flexible server, a protected instance is created. Each instance is charged on the basis of its size (in GBs) on a per unit (250 GB) basis.
Backup Storage fee: Azure Backup for PostgreSQL - Flexible servers store backups in Vault Tier. Restore points stored in the vault-standard tier are charged a separate fee called Backup Storage fee as per the total data stored (in GBs) and redundancy type enable on the Backup Vault.