EFS Backup Policy

📦 Overview

This Terraform module provisions an AWS Backup policy targeting an existing EFS file system. It includes:

A dedicated Backup Vault, a scheduled Backup Plan, and a backup selection targeting your specified EFS file system—all built to enforce reliable, automated backup routines.

---

✅ Key Features

• Creates a dedicated AWS Backup Vault for EFS snapshots
• Defines a scheduled Backup Plan with recurring backup rules
• Links an existing EFS file system via a Backup Selection
• Adds environment and name tags for organization and filtering

---

💼 Use Cases

• Enabling automated daily backups for critical shared storage
• Supporting disaster recovery policies for EFS-backed workloads
• Enforcing routine data protection for compliance-driven environments
• Modular backup control without altering existing EFS configs

---

📥 Input Variables

Name	Type	Description
region	string	AWS region where backups should be managed
efs_file_system_id	string	The ID of the existing EFS file system to back up
environment	string	Tag to specify the deployment environment (e.g., dev, staging, prod)
name	string	A name prefix for identifying the vault and plan

---

📤 Outputs

Name	Description
backup_vault_name	The name of the created Backup Vault
backup_plan_id	The ID of the scheduled Backup Plan
efs_backup_selection_id	The resource linking the backup plan to the EFS file system

---

🚀 Deployment Readiness

• ✅ Compatible with Terraform 1.0+
• ✅ Tested with AWS provider 5.x
• 🧪 Requires existing EFS filesystem and IAM permissions for AWS Backup

---

🛠️ Example Usage

module "efs_backup_policy" {
  source             = "git::ssh://git@github.com/archiphire/aws-level-1-modules.git//storage/efs-backup-policy?ref=v1.0.0"

  region             = "us-east-1"
  efs_file_system_id = "fs-12345678"
  environment        = "dev"
  name               = "efs-backup"
}

terraform init
terraform plan
terraform apply

or

tofu init
tofu plan
tofu apply

🧹 Cleanup Options

Terraform Destroy (for test environments):

terraform destroy

or

tofu destroy

Manual Cleanup (recommended for production):

Delete the Backup Plan, Vault, and Selection via AWS Console or CLI Ensure no other systems are using shared backup configurations

🛡️ Notes

This is a Level 1 baseline module designed for modular use. It complements any EFS setup by adding automated backup protection.

For advanced backup tiering, cross-region replication, or custom lifecycle rules, compose this into a Level 2 module.

🔒 Deployment Package Notice

This module is part of the Level 1 AWS License Tier. To access the full deployment package and source code, subscribe to Archiphire.