Skip to main content
Connect an AWS account with Terraform, protect an S3 bucket, and verify recovery with a small restore.
This is a content prototype. The workflow is based on public Clumio documentation, but Reclear has not run it against a Clumio tenant. A production version would require a live test of every step.

​
Before you start

You need:
  • permission to create an IAM role and related policies in the AWS account;
  • Terraform 1.0 or later for the infrastructure-as-code path.
1

Choose a control plane

Choose a control plane that supports the AWS regions containing the resources you want to protect. The US East control plane is available only to existing customers. New US customers use US West.See Supported regions for the current control-plane and data-plane mapping.
2

Create the tenant

Sign up directly through the Clumio portal.
3

Create an API token

Create a personal token for this tutorial and store it in a secrets manager. Follow Create and rotate API tokens.
4

Connect the AWS account with Terraform

Use the Terraform provider and AWS bootstrap module for a reviewable infrastructure-as-code workflow.The Terraform path has two parts:
  1. clumio_aws_connection registers the AWS account and region with Clumio.
  2. clumio-code/aws-template/clumio creates the AWS resources required for the selected data sources.
The Terraform provider guide contains a verified example based on Clumio’s current Registry documentation.
5

Confirm discovery

Return to the Clumio console and confirm that the connected account appears in inventory. Check that the resources you plan to protect are visible before creating a policy.
6

Configure protection

Create a protection group, define a backup policy, and assign the policy to the group. With the Terraform provider, these are separate resources:
  • clumio_protection_group selects the S3 buckets;
  • clumio_policy defines the RPO, retention, and backup tier; and
  • clumio_policy_assignment connects the policy to the protection group.
Run terraform plan before applying the configuration.
7

Verify a backup and restore

Confirm that Clumio reports a successful backup for the protected resource. Then restore a small object or test resource to a safe target and confirm that the recovered data is usable.This prototype does not include a REST restore request because no example was validated against a live tenant. That request should be added only after testing the exact endpoint and payload.

​
What you completed

You connected an AWS account, selected S3 resources for protection, assigned a backup policy, and verified recovery with a small restore.

​
Continue with developer tooling

Developer tools

Choose between the REST API, SDKs, Terraform provider, bulk tools, Velero plugin, and MCP example.

Authentication

Generate an API token and configure the correct API base URL.