To prevent data loss or corruption, use Cloud Backup to back up all directories and files in an Object Storage Service (OSS) bucket. Cloud Backup lets you configure flexible backup policies to back up data to the cloud. You can view and restore data at any time. This topic describes how to use Cloud Backup to back up files in an OSS bucket.
Prerequisites
You have activated the Alibaba Cloud Cloud Backup service. Activating Cloud Backup is free of charge, but using Cloud Backup's OSS backup feature incurs Cloud Backup storage capacity fees and OSS request fees. The OSS request fees are charged by OSS. For more information, see OSS backup fees.
Create a Standard or Infrequent Access (IA) bucket. For more information, see Create buckets.
If you use the OSS inventory feature to back up large volumes of OSS data, ensure the inventory file meets the specified requirements. For details, see Back up a large number of OSS objects by using the OSS inventory feature.
Usage notes
When you create a backup plan or assign a backup policy for the first time, Cloud Backup automatically creates a service-linked role named AliyunServiceRoleForHbrOssBackup to access the required resources. An authorization dialog box appears. Grant permissions as prompted.
When using Cloud Backup to back up OSS data, note the following:
Cloud Backup only backs up and restores Standard and Infrequent Access (IA) buckets. Archive, Cold Archive, and Deep Cold Archive buckets are not supported.
Cloud Backup backs up and restores Standard and Infrequent Access (IA) objects. When you restore an IA object, it is restored as a Standard object. Objects of the Archive, Cold Archive, and Deep Cold Archive storage classes cannot be backed up or restored.
Cloud Backup does not back up or restore object access control lists (ACLs).
Deleting a backup version from the backup history does not affect the integrity of other backup versions.
The Scheduled Backup plan enabled when you create a bucket in the OSS console is a 30-day free trial that is automatically disabled upon expiration. This backup plan is also visible and manageable in the Cloud Backup console. We recommend switching to a paid plan before the trial ends to ensure continuous protection.
ImportantThe free trial plan has limitations: you cannot edit the backup path or backup schedule. Each free backup plan uses an isolated backup vault, and you cannot change the backup vault after you switch to a paid plan. If you plan to back up all your data to the same backup vault, do not use the free trial plan.
Billing
Backing up OSS data incurs OSS request fees. These fees are charged by OSS. For more information, see Billing overview.
When Cloud Backup reads data from an IA bucket or object for backup, OSS data retrieval fees are generated. These fees are charged by OSS based on the amount of data retrieved. For more information, see Data processing fees.
Video tutorial
Back up OSS files
The first backup job after a backup plan is created is a full backup. Subsequent jobs are incremental backups by default.
Create a backup plan
On the OSS Backup page, select the region of the source OSS bucket and click Add OSS Backup.
NoteIf you are using the previous version of the console (which displays Try New Version in the upper-right corner), click Create Backup Plan on the Backup Plan tab.
In the Create Backup Plan panel, configure the parameters as described below and click OK.
NoteWhen you select an OSS bucket, the system automatically checks its eligibility for a free trial. If the bucket is eligible, the free plan form appears by default. Otherwise, the paid plan form appears. In the free plan form, click Switch to Paid Plan to create a paid plan. To return to the free plan form, close the panel and click Add OSS Backup again.
Select the Source OSS Bucket and configure the following parameters.
Free plan
ImportantFor a free plan, the backup vault is automatically created, and its encryption method is fixed to be fully managed by Cloud Backup.
The backup path for a free plan is fixed to the root directory of the bucket. The backup schedule and retention policy are automatically configured and cannot be changed. Each free plan uses an independent backup vault. After you switch to a paid plan, you cannot change the backup vault. If you plan to back up all your data to the same backup vault, do not use the free trial plan.
After you configure the following parameters, click OK.
Parameter
Description
Pay After Trial Ends
If enabled, the free backup plan is automatically converted to a paid plan upon expiration.
Backup plan name
A default name is automatically generated. You can enter a custom name.
Paid plan
After you configure the following parameters, click OK.
Parameter
Description
Source Path
Select a directory (prefix) of the source bucket. If you do not select a directory, the entire bucket is backed up.
Do Not Prompt that Archived Objects Are Not Backed Up
This feature is available only in the China (Shanghai) and Malaysia (Kuala Lumpur) regions. By default, if a backup job encounters an Archive object, the job is marked as Partially Completed, and the object appears in the failed file list. If you enable this feature, Cloud Backup ignores Archive objects instead of reporting them as failed.
Backup Policy
Select a backup policy from the drop-down list.
Cloud Backup automatically backs up data sources based on the backup policy that you configure. A backup policy defines the backup vault encryption method, backup interval, retention period, cross-region replication policy, automatic archiving rule, and backup point virus detection setting. This helps you flexibly manage assets from different data sources.
If the default backup policies cannot meet your backup requirements, click Create Backup Policy or Edit Policy to manage backup policies. For more information about the parameters of a backup policy, see Policy Center.
Performance Optimization
Use OSS Inventory
Specifies whether to use the OSS inventory feature to back up OSS data. The default value is No. We recommend that you back up a large number of OSS objects by using the OSS inventory feature.
After the backup plan is created, its status becomes Running. Cloud Backup runs OSS backup jobs based on the specified start time and backup interval. The bucket is added to the list of protected resources on the OSS Backup page.
Backup status
Backup status | Description |
Ready | The resource was just added to the protected resource list and is waiting for the first backup. |
Backing Up | The backup is healthy and waiting for the next backup job. |
Backing Up (In Progress) | The backup is healthy and a backup job is in progress. |
Suspended | All backup plans for this resource are suspended. To continue the backup, enable any backup plan on the backup details page. |
Stopped | The backup source cannot be found, possibly because it was deleted. The backup data is automatically deleted after it expires. You can view the expiration time or restore data from the backup history list on the backup details page. |
View backup jobs
At the scheduled time, Cloud Backup starts and runs the backup job.
The backup progress percentage is dynamically estimated by the system based on the current data volume and is for reference only. It does not indicate the exact completion percentage. During the backup process, the displayed total scanned size may be smaller than the actual total data volume because data scanning may not be complete. The final status of the backup job prevails.
On the Backup Jobs tab, if the Status of a backup job is Completed, the backup is successful. You can view details such as Source Scanned Total, Backed Up, Written to Vault, and Backup Speed. For more information about the metrics, see the tooltips in the Cloud Backup console.
A status of Partially Completed indicates that objects of the Archive, Cold Archive, or Deep Cold Archive storage classes were skipped, as they are not supported.
If the status of a backup job is Timed Out, the backup job failed to complete within the specified period.
For backup jobs completed on or after June 1, 2025, Cloud Backup displays both data volume and file count for Source Scanned Total, Backed Up, and Written to Vault. For jobs completed before this date, only data volume statistics are displayed for these metrics.
The job list shows only backup job records from the last six months. For older data, export it from Reports & Audits.
To cancel a job in progress, click Cancel in the Actions column of the backup job and confirm the action.
Manage backup content
On the OSS Backup page, select the region where the source OSS bucket resides, click View Details to the right of the target bucket, and then manage backup content on the Backup History tab as needed.
If you are using the previous version of the console (which displays Try New Version in the upper-right corner), click the 
icon in front of the target bucket on the Backup Plans tab to perform the operation. The operations in the previous version of the console are consistent with the operations after you click the 
icon to switch the display mode.
Browse files
The Browse feature lets you view backed-up files. If a virus scan has been run on a backup point, Cloud Backup highlights any infected files found.
On the Backup History tab, click Browse in the Actions column of the target backup point.
You can also click the
icon on the right side of the backup history to switch the display mode, and then click the target backup point and select Browse.In the Browse panel, view the backed-up OSS files.
You cannot directly download backed-up files. You must create a restore job, specify a destination bucket and prefix, restore the backup data to that path, and then download the data.
Extend retention period
To retain OSS backup data for a longer period, you can extend the retention period of specific backup points.
The retention period of a backup point can only be extended, not shortened.
You cannot extend the retention period for a backup point that is set to never expire.
On the Backup History tab, click the
icon in the Expires At column of the target backup point.You can also click the
icon on the right side of the backup history to switch the display mode, and then click the target backup point and select the 
icon to the right of Expires At.Set a Schedule Time or select Never Expire, and click Save.
After the configuration is complete, you can view the new expiration time in the Expires At column.
Delete data
You can delete backup points that are no longer needed.
Deleted backup points cannot be recovered. Proceed with caution.
If "Keep at least one backup version" is enabled in the associated backup policy, you cannot delete the latest backup. To delete this backup, first disable the setting in the backup policy, or disassociate the data source from the policy.
After a backup plan is deleted, Cloud Backup removes the OSS bucket from the backup list when all backup points for that bucket automatically expire or are deleted.
On the Backup History tab, use either of the following methods to delete backup points in list mode.
Delete a single backup point: Click Delete in the Actions column of the target backup point, and then confirm the deletion.
Delete multiple backup points: Select the target backup points, click Delete Backup Point below the list, and then confirm the deletion.
You can also click the icon on the right side of the backup history to switch the display mode, click the target backup point, and then select Delete.
Manage backup plans
On the OSS Backup page, select the region where the source OSS bucket is located, click View Details to the right of the target bucket, and then switch to the Backup Plans tab to manage backup plans as needed.
If you are using the previous version of the console (which displays Try New Version in the upper-right corner), select the corresponding function in the Actions column for the target bucket on the Backup Plans tab.
Execute now
In the Actions column of the backup plan, choose to start a backup immediately.
Modify plan
Click Modify in the Actions column of the backup plan.
In the Configure Plan panel, modify the backup policy and advanced settings as needed.
Click OK.
Suspend or resume plan
Backup plans are enabled by default. If you need to stop backups temporarily, you can suspend the plan and resume it later.
Suspend a plan: Turn off the switch in the Plan Status column or choose in the Actions column, and confirm the suspension.
After a backup plan is suspended, subsequent backup jobs no longer run. The generated backup points are not affected and automatically expire based on the retention period. If "Keep at least one backup version" is enabled in the associated backup policy, the last backup version is not affected by the retention period. If backup points are still retained for the bucket after the plan is suspended, billing for that bucket continues.
Resume a plan: After a backup plan is suspended, turn on the switch in the Plan Status column or choose in the Actions column.
Delete plan
If you no longer need to periodically back up a resource, you can delete its backup plan.
Deleted backup plans cannot be recovered. Proceed with caution.
In the Actions column of the backup plan, choose , and confirm the deletion.
Alert settings
In the Actions column of the backup plan, choose to configure alert notifications for the backup plan.
Cancel OSS backup
To completely stop backing up an OSS bucket, you must delete its backup plan and all existing backup data.
After you cancel the backup, the OSS bucket no longer appears in the list of protected OSS resources.
Enterprise-grade capabilities
Virus detection
To prevent files that contain viruses from being restored to your production environment, Cloud Backup provides a backup point virus detection feature. This helps you select a clean and secure backup point for future data recovery. On the Backup Details tab, in the Backup History section, choose in the Actions column of the target backup point to scan files for viruses.
When you restore backup data, you can enable Perform virus detection upon restore. When enabled, Cloud Backup scans all files for viruses during the restore process. Files detected as safe are restored, and files detected as viruses are not restored.
Backup vault replication
To mitigate the impact of regional disasters or account management risks on business continuity, Cloud Backup lets you configure cross-region replication or cross-account replication for backup vaults whose Vault Type is General-purpose. After replication is configured, data in the source backup vault is automatically synchronized to the destination backup vault to ensure data consistency. You can also perform cross-region data restores from the destination backup vault as needed.
For general-purpose backup vaults that store OSS file backups, backup vault replication provides cross-region or cross-account disaster recovery protection.
In addition, OSS file backup supports enterprise-grade features such as cross-account backup, automatic archiving, KMS encryption, and immutable backup.
Troubleshooting
If the Status of a backup plan or backup job is abnormal, resolve the issue as described in the following sections.
Backup job Status: Failed (The OSS bucket does not exist.)
This error occurs if the source OSS bucket was deleted.
If the deletion was intentional, you can ignore the backup job status. To avoid additional backup storage fees, go to Storage Vaults in the left-side navigation pane and delete the corresponding backup vault.
If the bucket was deleted by mistake and you want to restore the data, create an OSS bucket in the same region and use it as the restore destination. For more information, see Create an OSS restore job.
Backup job Status: Failed (No OSS inventory list is available. Please wait for the next backup when the latest inventory list is automatically detected and used.)
This error occurs because no OSS inventory file was found in the specified directory (prefix). Verify in the OSS console that an inventory file has been generated for the bucket.
Backup plan Status: Suspended
The backup plan is suspended. After suspension, Cloud Backup no longer protects the OSS bucket. We recommend that you resume the backup plan as soon as possible.
Backup job Status: Timed Out
The backup job did not complete within the allowed time, possibly due to a large data volume. You can manually restart the job by choosing in the backup plan.
Related documents
Cloud Backup provides resource plans for various backup scenarios to help you save costs. For more information, see Resource plan purchase guide.
The Cloud Backup data synchronization feature lets you synchronize large volumes of OSS files from a source to a destination.
For more information about the product, see What is Cloud Backup?.