이 문서에서는Google Cloud 콘솔을 사용하여 인스턴스를 만들 때 백업 및 DR 서비스 백업 계획을 Compute Engine 인스턴스에 적용하는 방법을 설명합니다.
백업 및 DR 서비스 백업 계획을 사용하여 Compute Engine 인스턴스의 삭제 불가능한 규칙 기반 백업을 만든 후 격리된 안전한 스토리지 위치에 백업을 저장합니다.
백업 및 DR 백업 계획을 사용하면 Backup Vault라는 안전한 스토리지 위치에 Compute Engine 인스턴스를 저장하는 고급 백업 전략을 정의할 수 있습니다. 인스턴스에 적용된 백업 계획을 사용하여 Backup Vault에서 인스턴스의 예약된 백업 또는 주문형 백업을 만들 수 있습니다.
시작하기 전에
Compute Engine 인스턴스가 있는 위치에서 백업 및 DR 서비스 API를 사용 설정합니다.
Compute Engine 인스턴스를 인스턴스와 다른 프로젝트에 있는 Backup Vault에 백업하려면 Backup Vault의 백업 및 DR 보관소 서비스 에이전트에 해당 프로젝트의 인스턴스에 액세스할 수 있는 권한이 부여되었는지 확인합니다. Backup Vault 및 인스턴스가 같은 프로젝트에 있으면 기본적으로 이 권한이 이미 부여되어 있습니다.
백업 및 DR Vault 서비스 에이전트에 Compute Engine 인스턴스를 Backup Vault에 백업하는 데 필요한 권한이 있도록 관리자에게 백업 및 DR Vault 서비스 에이전트에 Compute Engine 인스턴스 프로젝트에 대한 백업 및 DR Compute Engine 작업자(roles/backupdr.computeEngineOperator) IAM 역할을 부여해 달라고 요청하세요.
백업 계획이 적용된 인스턴스 만들기
백업 계획이 적용된 인스턴스를 만들려면Google Cloud 콘솔에서 다음 단계를 따르세요.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-08-19(UTC)"],[[["\u003cp\u003eThis guide outlines the process of applying a Backup and DR Service backup plan to a new Compute Engine instance during its creation using the Google Cloud console.\u003c/p\u003e\n"],["\u003cp\u003eBackup and DR backup plans define rules for backing up Compute Engine instances, including frequency, retention, and replication, storing them in secure backup vaults.\u003c/p\u003e\n"],["\u003cp\u003eTo apply a backup plan during instance creation, you must have the required IAM roles and have previously created a backup vault and a backup plan in the same region.\u003c/p\u003e\n"],["\u003cp\u003eCertain Compute Engine instance configurations are not supported for Backup and DR Service backups, including those with extreme or Hyperdisk volumes, specific machine types, CMEK/CSEK encryption, no attached disks, or those larger than 200 TB.\u003c/p\u003e\n"],["\u003cp\u003eThe Google Cloud console is required to apply a backup plan when creating an instance, with the option located in the "OS and storage" or "Data protection" section of the instance creation process.\u003c/p\u003e\n"]]],[],null,["# Apply a backup plan during instance creation\n\n*** ** * ** ***\n\nThis document explains how to apply a Backup and DR Service backup plan to your\nCompute Engine instance when you create the instance using the\nGoogle Cloud console.\n\nUse Backup and DR Service backup plans to create rule-based and indelible backups\nof your Compute Engine instances and then store those backups in a\nsecure and isolated storage locations.\n\nBackup and DR backup plans let you define advanced backup strategies\nto store your Compute Engine instances in secure storage locations\ncalled backup vaults. Using the backup plan applied to your instance,\nyou can create scheduled or on-demand backups of your instance in a\nbackup vault.\n\nBefore you begin\n----------------\n\n- Enable the Backup and DR Service API where the Compute Engine instances are located.\n [Enable the API](https://console.cloud.google.com/flows/enableapi?apiid=backupdr.googleapis.com&_ga=2.145630134.30427899.1640890668-1982243420.1634228058)\n\n- [Create a backup vault](/backup-disaster-recovery/docs/cloud-console/backup-vault-create)\n- [Create a backup plan](/backup-disaster-recovery/docs/cloud-console/backup-plan-create)\n- Set up Log Analytics on your bucket to monitor Backup and DR backup jobs.\n\n### Required roles\n\n-\n\n To get the permissions that\n you need to create an instance and apply a backup plan during its\n creation,\n\n ask your administrator to grant you the\n following IAM roles:\n\n - To create the instance: [Compute Instance Admin (v1)](/iam/docs/roles-permissions/compute#compute.instanceAdmin.v1) (`roles/compute.instanceAdmin.v1`) on the project for the Compute Engine instance\n - To configure scheduled backups or run on-demand backups:\n - [Backup and DR Backup User](/iam/docs/roles-permissions/backupdr#backupdr.backupUser) (`roles/backupdr.backupUser`) on the project for the backup vault\n - [Viewer](/iam/docs/roles-overview#basic) (`roles/viewer`) on the project for the backup vault\n\n\n For more information about granting roles, see [Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access).\n\n\n You might also be able to get\n the required permissions through [custom\n roles](/iam/docs/creating-custom-roles) or other [predefined\n roles](/iam/docs/roles-overview#predefined).\n- If you want to back up a Compute Engine instance to a\n backup vault that is in a different project than the instance, then\n make sure the\n [Backup and DR Vault Service Agent](/iam/docs/service-agents#backup-and-dr-vault-service-agent) for the backup vault has been\n granted permission to access the instances in that project. (If the\n backup vault and instance are in the same project, then this\n permission is already granted by default.)\n\n-\n\n To ensure that Backup and DR Vault Service Agent has the necessary\n permissions to back up a Compute Engine instance to a\n backup vault,\n\n ask your administrator to grant Backup and DR Vault Service Agent the\n\n\n [Backup and DR Compute Engine Operator](/iam/docs/roles-permissions/backupdr#backupdr.computeEngineOperator) (`roles/backupdr.computeEngineOperator`)\n IAM role on the project for the Compute Engine instance.\n\n\n | **Important:** You must grant this role to Backup and DR Vault Service Agent, *not* to your user account. Failure to grant the role to the correct principal might result in permission errors.\n\n \u003cbr /\u003e\n\nCreate an instance that has a backup plan applied\n-------------------------------------------------\n\nTo create an instance that has a backup plan applied, follow these steps in the\nGoogle Cloud console:\n\n1. In the Google Cloud console, go to the **Create an instance** page.\n\n [Go to Create an instance](https://console.cloud.google.com/compute/instancesAdd)\n\n If prompted, select your project and click **Continue**.\n\n The **Create an instance** page appears and displays the\n **Machine configuration** pane.\n2. In the **Name** field, specify a name for your instance. For more\n information, see\n [Resource naming convention](/compute/docs/naming-resources#resource-name-format).\n\n3. In the **Region** field, specify the region where you want your instance.\n\n4. Optional: In the **Zone** field, select a zone for this instance.\n\n The default selection is **Any**. If you don't change this default\n selection, then Google automatically chooses a zone for you based on\n machine type and availability.\n5. To specify a backup plan for this instance, do the following:\n\n 1. In the navigation menu, click **OS and storage** . The\n **Operating system and storage** pane appears.\n\n | **Important:** If you see a **Data protection** pane in the navigation menu, click **Data protection** instead of **OS and storage** and then continue with the remaining steps. For more information, see the [February 14, 2025 release note](/compute/docs/release-notes#February_14_2025).\n 2. In the **Backup plan** section, click **Select a plan**.\n\n 3. In the **Select a backup plan** pane that appears, do the following:\n\n 1. Verify that the **Project** field has the same project name where your backup plans exist. If not, select the correct project.\n 2. In the **Backup plan name** column, click the name of the back plan that you want to use.\n 3. To confirm your choice of backup plan and return to the **Operating system and storage** pane, click **Apply**.\n6. Optional. Specify any other configuration parameters of your choice. For\n more information about custom configuration options, see\n [Create and start an instance](/compute/docs/instances/create-start-instance).\n\n7. To create and start the VM, click **Create**.\n\nWhat's next\n-----------\n\n- Learn how to use your instance's backup plan to [schedule or create backups in a backup vault](/backup-disaster-recovery/docs/cloud-console/compute/compute-instance-backup).\n- Learn how to [restore an instance from a backup vault](/backup-disaster-recovery/docs/cloud-console/compute/compute-instance-restore).\n- Learn how to [change the backup plan that's applied to an instance](/compute/docs/instances/change-backup-plan-for-instance) ([Preview](/products#product-launch-stages))."]]
