Docs Home

/ /

Export Snapshots to Object Storage

Docs Home

Management

Backup, Restore, and Archive

Export Snapshots to Object Storage

Docs Home

Management

Backup, Restore, and Archive

Export Snapshots to Object Storage

Export Cloud Backup Snapshots to Azure Blob Storage

Note

This feature is not available for Free clusters and Flex clusters. To learn more about which features are unavailable, see Atlas Free Cluster Limits.

Atlas lets you export your Cloud Backup snapshots to Azure Blob Storage containers. You can export snapshots in two ways:

To automatically export snapshots as your backup policy creates them, see Export Snapshots Automatically.
To manually export a single existing snapshot, see Export a Single Snapshot Manually.

Each procedure requires the same prerequisites.

For an overview of how Atlas exports snapshots and the files it uploads, see Export Cloud Backup Snapshots to Object Storage.

Limitations

You can't perform the following actions:

Export fallback snapshots.
Have more than one active export per snapshot.
Export view collections, or system collections, except for <database>.system.js collections.
Export snapshots from clusters in an Atlas project with IP-restricted Encryption at Rest enabled.
Export snapshots over Private Endpoints (private exports) for Azure or Google Cloud clusters.

Required Access

To create or manage a Cloud Backup export schedule or configure a Cloud Backup export bucket in Atlas, you must have Project Backup Manager or Project Owner to the project.
To create or manage a Cloud Backup export job, you must have Project Backup Export Operator or Project Owner access to the project.
To create or manage a Cloud Backup object storage private endpoint, you must have Project Owner access to the project.

Configure and Run Exports

Interface

Prerequisites

To export your Cloud Backup snapshots, you need an M10 or higher Atlas cluster with Cloud Backup enabled. In addition, to set up Atlas access to your object store, you must do the following:

Set up an Azure Service Principal

Set up an Azure Service Principal with an access policy for your Atlas project.

Assign storage roles to your Service Principal

Assign the Storage Blob Delegator and Storage Blob Data Contributor roles to your Azure Service Principal.

To assign the roles to your Service Principal, you need the following information:

Role

Description

Storage Blob Delegator

This allows the Service Principal to sign SAS tokens to access the Azure Storage Container. To assign this role, run the following command:

az role assignment create --assignee-object-id <service-principal-id> --role "Storage Blob Delegator" --scope /subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.Storage/storageAccounts/<storage-account-name>

Storage Blob Data Contributor

This allows read, write, and delete blob access for the Azure Storage Container. To assign this role, run the following command:

az role assignment create --assignee-principal-type ServicePrincipal --assignee-object-id <service-principal-id> --role "Storage Blob Data Contributor" --scope /subscriptions/<subscription-id>/resourceGroups/<resource-group-name>/providers/Microsoft.Storage/storageAccounts/<storage-account-name>/blobServices/default/containers/<container-name>

Export Cloud Backup Snapshots to Azure Blob Storage

Note

Limitations

Required Access

Configure and Run Exports

Prerequisites

Set up an Azure Service Principal

Assign storage roles to your Service Principal

Export Snapshots Automatically

Export a Single Snapshot Manually