About File Storage for VPC snapshots
File Storage snapshots are used to create a point-in-time copy of your File Storage for VPC share. The initial snapshot that you take is a full backup of the share. Subsequent snapshots of the same share are incremental, so they capture only the changes that occurred after the last snapshot was taken. You can use a snapshot to restore data to a new share in the console, from the CLI, with the API, or Terraform.
Snapshots concepts
Limitations
The following limitations apply to this release:
- File share snapshots cannot be copied to another zone or region. They are stored in the same location as the file share. If you want the snapshots to survive the loss of the availability zone, you need to configure replication for the file share. When a replica share is created, all snapshots that are present on the source volume are also copied to the replica.
- Snapshots are not supported on shares with Access control mode "VPC".
- Taking snapshots are also not supported on replica shares or Accessor shares. However, the
/.snapshotand.snapdirectory is accessible both on replica and Accessor shares.
Snapshots for second-generation file shares
Customers with special access, you can provision second-generation file shares with the rfs profile and create snapshots of these shares. During the select availability phase, second-generation
storage volumes can range in size from 1 GB to 32 TB. You can create snapshots of the entire volume as needed. You can take up to 30 snapshots per share in a region. If needed, this limit can be increased upon request.
You can use your snapshots to create other second-generation file shares in the same region. You can't use your second-generation snapshot to create a zonal file share. Similarly, you can't use first-generation file share's snapshot to create
a share with the rfs profile.
You cannot schedule the creation of snapshots in this release.
Securing your data
IBM Cloud® offers security-specific tools and features to help you securely manage your data when you use IBM Cloud® Virtual Private Cloud. The following section provides information about access control, data encryption, configuration management, and auditing options that are available for your file share snapshots.
Managing security and compliance
Because snapshots are created from File Storage for VPC shares, they share the encryption key. When a share is created from a Snapshot, your SCC-registered preference of allowing only Customer-Managed encryption is applicable. For more information, see Getting started with Security and Compliance Center.
Activity tracking and auditing
When you initiate an activity on a snapshot, specific Activity tracking events are generated. These activities include creating, listing, modifying, and deleting snapshots. For more information, see File storage snapshots events.
Observability
When snapshots are added or deleted, the change in the snapshot size is reported within 15 minutes. For more information, see Monitoring metrics for File Storage for VPC.
Next steps
You can create and manage your snapshots in the console, from the CLI, with the API, and Terraform.
- To use the console, log in to the IBM Cloud console.
- To use the CLI, download and install the required CLI plug-ins. For more information, see the CLI reference.
- To use the API, set up the VPC API.
- To use Terraform, download the Terraform CLI and configure the IBM Cloud Provider plug-in. For more information, see Getting started with Terraform.
For more information about creating and managing snapshots, and restoring a share from a snapshot, see the following topics.