Amazon Lightsail
Step by step guide to automate Amazon Lightsail server and volume snapshots on a custom schedule, daily, hourly, weekly, etc.
Create your AWS credentials
In order for SimpleBackups to manage your Amazon Lightsail Snapshots, a IAM Users to be created with the right policies.
We will create a custom policy first to allow us to manage your Amazon Lightsail Snapshots. The policy will include the least required permissions to manage snapshots.
Create a custom Lightsail policy for snapshots
- Connect to your AWS Console
- Head to IAM/Policies management page
- Click on "Create policy"
- Click on JSON and paste the custom policy below:
For your reference, here is the policy to copy and paste:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "SimpleBackupsLightsailSnapshots",
"Effect": "Allow",
"Action": [
"lightsail:GetInstance",
"lightsail:GetInstances",
"lightsail:GetInstanceSnapshot",
"lightsail:GetInstanceSnapshots",
"lightsail:CreateInstanceSnapshot",
"lightsail:DeleteInstanceSnapshot",
"lightsail:GetDisk",
"lightsail:GetDisks",
"lightsail:GetDiskSnapshot",
"lightsail:GetDiskSnapshots",
"lightsail:CreateDiskSnapshot",
"lightsail:DeleteDiskSnapshot",
"lightsail:TagResource",
"lightsail:UntagResource",
"lightsail:CopySnapshot"
],
"Resource": "*"
}
]
}
- Click on "Next: Tags" then "Next: Review"
- Give the policy a name, "LightsailSnapshotsPolicy" then click on "Create policy"
Create a Lightsail user for snapshots
- Head to IAM/Users management page
- Click on "Add users"
In the "Add user" form fill in information shown below:
Step 1: Set user access
- Define a name to your user.
- Choose "Access key - Programmatic access" for "Select AWS Credential type".
Step 2: Attach policy to user
- Select "Attach existing policies directly" and select "LightsailSnapshotsPolicy" (we created in the earlier step).
- Select "Create user without a permission boundary" in the "Set permissions boundary" section.
Step 3: Finalize user creation
- You don't have to add any specific tag, just click "Next".
- Review and create the user.
Step 4: Copy your access and secret keys
Copy your "access key id" and secret "access key".
Connect AWS Lightsail Account to SimpleBackups
With this done, you now have a IAM User with an access key and secret that we'll be able to use in SimpleBackups to automate your Amazon Lightsail Snapshots.
- Log in to your Lightsail account and navigate to the Lightsail instance you want to backup. Note which region your Lightsail instance is hosted on.
- Navigate to SimpleBackups new snapshot job creation page.
- Click on "Connect a new Provider" and select Amazon Lightsail from the provider dropdown menu.
- Once you have selected your provider, give it a name and paste in the values for your Key and Secret. Then choose the region where your Lightsail instance is hosted and click on "Save provider."
- Select your Lightsail instance.
- Give your snapshot job a schedule, the number of snapshots to retain, and a friendly name you can remember.
That's it! Your AWS Lightsail instance is now set up with SimpleBackups!
Last updated on June 5, 2023