Backing Up UNAS Data to Amazon S3, Backblaze B2, and Wasabi

UniFi Drive makes it easy to back up your data to the cloud, helping ensure reliability, security, and disaster recovery. It supports popular cloud storage providers, including Amazon S3, Backblaze B2, and Wasabi. This article covers best practices for configuring UNAS backup tasks for each provider. If you're looking to troubleshoot a UNAS backup issue, click here. 

Backing Up to Amazon S3

Ensure you already have an AWS account and a user with sufficient permissions. 

1. In IAM (Identity and Access Management), navigate to Users > Create user, enter a username (e.g., unas-backup-user), skip group assignment for now, then review and create the user.
2. Click on the created user and select Add permissions > Create inline policies.
3. Switch to the JSON tab and paste the following JSON. This will allow the UniFi Drive backup process to:
   • Create or select existing buckets.
   • Upload, download, or delete files.

   • Query bucket metadata.

     { "Version": "2012-10-17", "Statement": [   {     "Effect": "Allow",     "Action": [       "s3:ListAllMyBuckets",       "s3:CreateBucket"     ],     "Resource": "arn:aws:s3:::*"   },   {     "Effect": "Allow",     "Action": [       "s3:ListBucket",       "s3:GetBucketLocation"     ],     "Resource": "arn:aws:s3:::*"   },   {     "Effect": "Allow",     "Action": [       "s3:PutObject",       "s3:GetObject",       "s3:DeleteObject",       "s3:ListMultipartUploadParts",       "s3:AbortMultipartUpload"     ],     "Resource": "arn:aws:s3:::*/*"   } ] }

4. Save with a policy name (e.g., UNASBackupPolicy).
5. Generate a key by selecting the user and going to Security credentials > Create access key.
6. Save the Access Key ID and Secret Access Key securely (Secret Key is shown only once).
7. Navigate to your Site Manager > UNAS > Drive > Backup and create a task:
   • Provider: Amazon S3.
   • Access Key / Secret Key: Enter the Access Key ID and Application Key.
   • Bucket: Use an existing bucket or create one.

Backing Up to Backblaze B2

1. In Backblaze Console, navigate to App Keys > Add a New Application Key.
2. Enter a name (e.g., UNASBackupKey) and configure the following:
   • Bucket: Select All.
   • Type of Access: Select Read and Write.
   • File name prefix: Leave blank to avoid restricted access.
3. Click Create Key.
4. Save the credentials securely (Key ID, keyName, and Application Key).
5. Navigate to your Site Manager > UNAS > Drive > Backup and create a task:
   • Provider: Backblaze B2.
   • Access Key / Secret Key: Enter the Key ID and Application Key.
   • Bucket: Use an existing bucket or create one.

Backing Up to Wasabi

Ensure you have sufficient permissions and endpoint settings.

1. In Wasabi Console, navigate to Users > Create User.
2. Enter a username (e.g., unas-backup-user) and enable Programmatic (API) access.
3. Skip group and policy assignment for now.
4. Save the Access Key ID and Secret Access Key securely.

5. Navigate to Policies > Create Policy and paste the following JSON.

   { "Version": "2012-10-17", "Statement": [   {     "Sid": "AllowListingAllBuckets",     "Effect": "Allow",     "Action": ["s3:ListAllMyBuckets"],     "Resource": "*"   },   {     "Sid": "AllowBucketOperations",     "Effect": "Allow",     "Action": [       "s3:CreateBucket",       "s3:ListBucket",       "s3:GetBucketLocation"     ],     "Resource": "arn:aws:s3:::*"   },   {     "Sid": "AllowObjectOperations",     "Effect": "Allow",     "Action": [       "s3:PutObject",       "s3:GetObject",       "s3:DeleteObject",       "s3:ListMultipartUploadParts",       "s3:AbortMultipartUpload"     ],     "Resource": "arn:aws:s3:::*/*"   } ] }

6. Save with a policy name (e.g., UNASBackupPolicy).
7. Assign the policy to a user.
8. Navigate to your Site Manager > UNAS > Drive > Backup and create a task:
   • Provider: Wasabi.
   • Region: Select the region of your bucket.
   • Access Key / Secret Key: Enter the Access Key ID and Secret Access Key.
   • Bucket: Use an existing bucket or create one.