# 2121 07 Backup Dr Plan 76326532 > ๐Ÿ›ก๏ธ Backup and Disaster Recovery Plan: terraform-e2e - Skill: `tools-only/2121-07-backup-dr-plan-76326532` (Agent Skill, multi-file: 3 files) - Install (CLI): `npx skillmds@latest add tools-only/2121-07-backup-dr-plan-76326532` - Raw SKILL.md: https://api.skillmd.com/api/skills/tools-only/2121-07-backup-dr-plan-76326532/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: DevOps & Infra - Author: tools-only (https://skillmd.com/u/tools-only) - Updated: 2026-09-22 - Page: https://skillmd.com/skills/tools-only/2121-07-backup-dr-plan-76326532 --- # ๐Ÿ›ก๏ธ Backup and Disaster Recovery Plan: terraform-e2e ![Step](https://img.shields.io/badge/Step-7e-blue?style=for-the-badge) ![Status](https://img.shields.io/badge/Status-Draft-orange?style=for-the-badge) ![Agent](https://img.shields.io/badge/Agent-As--Built-purple?style=for-the-badge)
๐Ÿ“‘ DR Plan Contents - [๐Ÿ“‹ Executive Summary](#-executive-summary) - [๐ŸŽฏ 1. Recovery Objectives](#-1-recovery-objectives) - [๐Ÿ’พ 2. Backup Strategy](#-2-backup-strategy) - [๐ŸŒ 3. Disaster Recovery Procedures](#-3-disaster-recovery-procedures) - [๐Ÿงช 4. Testing Schedule](#-4-testing-schedule) - [๐Ÿ“ข 5. Communication Plan](#-5-communication-plan) - [๐Ÿ‘ฅ 6. Roles and Responsibilities](#-6-roles-and-responsibilities) - [๐Ÿ”— 7. Dependencies](#-7-dependencies) - [๐Ÿ“– 8. Recovery Runbooks](#-8-recovery-runbooks) - [๐Ÿ“Ž 9. Appendix](#-9-appendix) - [References](#references)
> Generated by as-built agent | 2026-02-26
| โฌ…๏ธ Previous | ๐Ÿ“‘ Index | Next โžก๏ธ | | ---------------------------------------------------- | ------------------- | -------------------------------------------------- | | [07-resource-inventory.md](07-resource-inventory.md) | [README](README.md) | [07-compliance-matrix.md](07-compliance-matrix.md) |
**Generated**: 2026-02-26 **Version**: 1.0 **Environment**: dev **Primary Region**: swedencentral **Secondary Region**: germanywestcentral (planned failover target) --- ## ๐Ÿ“‹ Executive Summary This plan defines backup and recovery procedures for the deployed Terraform workload. | Metric | Current | Target | | ------ | ------- | ------ | | **RPO** | 12 hours | 12 hours | | **RTO** | 24 hours | 24 hours | | **Availability Objective** | 99.5% | 99.5% | Current posture is single-region with manual DR orchestration. --- ## ๐ŸŽฏ 1. Recovery Objectives ### 1.1 Recovery Time Objective (RTO) | Tier | RTO Target | Services | | ---- | ---------- | -------- | | ๐Ÿ”ด Critical | 24 hours | Backend App Service, SQL DB | | ๐ŸŸ  Important | 24 hours | Frontend App Service, Key Vault | | ๐ŸŸข Standard | 48 hours | App Insights, Log Analytics, smart detector rules | ### 1.2 Recovery Point Objective (RPO) | Data Type | RPO Target | Backup Strategy | | --------- | ---------- | --------------- | | SQL ecommerce data | 12 hours | Azure SQL automated backups + point-in-time restore | | Infrastructure config | 1 hour | Terraform code in Git + remote state | | Operational telemetry | 24 hours | Log Analytics retention + App Insights historical data | --- ## ๐Ÿ’พ 2. Backup Strategy ### 2.1 Azure SQL Database | Setting | Configuration | | ------- | ------------- | | Backup Type | Platform-managed automated backups | | Backup Redundancy | Geo | | Restore Type | Point-in-time restore | | Target DB | sqldb-terraform-e2e-dev | **Point-in-Time Restore Command:** ```bash az sql db restore \ --resource-group rg-terraform-e2e-dev \ --server sql-terraform-e2e-dev-3hpu \ --name sqldb-terraform-e2e-dev \ --dest-name sqldb-terraform-e2e-dev-restored \ --time "" ``` ### 2.2 Key Vault | Setting | Configuration | | ------- | ------------- | | Soft Delete | Enabled | | Purge Protection | Enabled | | Auth Model | RBAC | ### 2.3 Terraform State and IaC | Setting | Configuration | | ------- | ------------- | | Source backup | Git repository history | | State backend | Azure Blob (`azurerm` backend) | | Recovery mechanism | `terraform init` + `terraform apply` from known commit | --- ## ๐ŸŒ 3. Disaster Recovery Procedures ### 3.1 Failover Procedure 1. Declare incident and confirm primary-region impact. 2. Freeze non-essential changes in current environment. 3. Select `germanywestcentral` as failover location. 4. Update Terraform variable `location` and deploy core stack. 5. Restore SQL data from latest viable recovery point. 6. Validate frontend/backend health and data consistency. 7. Communicate failover completion. ### 3.2 Failback Procedure 1. Confirm primary region stability for a sustained window. 2. Reconcile drift and data deltas. 3. Re-deploy primary environment from Terraform baseline. 4. Re-point traffic and run validation checks. 5. Decommission temporary failover resources when approved. --- ## ๐Ÿงช 4. Testing Schedule | Test Type | Frequency | Last Test | Next Test | | --------- | --------- | --------- | --------- | | SQL restore test | Quarterly | Not recorded | Next quarter from publication date | | Terraform rebuild test | Quarterly | Not recorded | Next quarter from publication date | | End-to-end DR drill | Semi-annual | Not recorded | Next half-year from publication date | --- ## ๐Ÿ“ข 5. Communication Plan | Audience | Channel | Template | | -------- | ------- | -------- | | Engineering | Teams/Slack | Incident update template | | Stakeholders | Email | Business impact summary | | Governance | Ticket system | Control impact + remediation plan | --- ## ๐Ÿ‘ฅ 6. Roles and Responsibilities | Role | Team | Responsibility | | ---- | ---- | -------------- | | Incident Commander | team-terraform lead | DR decision and execution oversight | | Platform Engineer | team-terraform | Terraform deploy/recover operations | | Application Owner | app team | App validation and smoke tests | | Security Reviewer | governance/security | Post-incident control verification | --- ## ๐Ÿ”— 7. Dependencies | Dependency | Impact | Mitigation | | ---------- | ------ | ---------- | | Azure control plane availability | Blocks redeploy/failover | Use tested scripts and documented manual fallback | | SQL restore point viability | Data recovery risk | Regular restore tests and retention verification | | Identity and RBAC continuity | Access disruption risk | Verify role assignments in post-failover checklist | --- ## ๐Ÿ“– 8. Recovery Runbooks | Scenario | Runbook | Owner | | -------- | ------- | ----- | | SQL corruption or deletion | Restore DB from PITR and repoint app config | Platform + DBA | | App runtime outage | Restart apps, rollback config, redeploy if needed | Platform on-call | | Region outage | Regional Terraform redeploy + SQL recovery | Incident Commander | --- ## ๐Ÿ“Ž 9. Appendix - Source of current resource names and IDs: [07-resource-inventory.md](./07-resource-inventory.md) - Day-2 command baseline: [07-operations-runbook.md](./07-operations-runbook.md) - Compliance dependencies: [07-compliance-matrix.md](./07-compliance-matrix.md) --- ## References | Topic | Link | | ----- | ---- | | Azure Backup overview | [Overview](https://learn.microsoft.com/azure/backup/backup-overview) | | Azure SQL restore | [Restore DB](https://learn.microsoft.com/azure/azure-sql/database/recovery-using-backups) | | DR planning | [Well-Architected DR](https://learn.microsoft.com/azure/well-architected/reliability/disaster-recovery) | ---
| โฌ…๏ธ [07-resource-inventory.md](07-resource-inventory.md) | ๐Ÿ  [Project Index](README.md) | โžก๏ธ [07-compliance-matrix.md](07-compliance-matrix.md) | | ------------------------------------------------------- | ----------------------------- | ----------------------------------------------------- |