Veeam and automation: backups that test themselves

Ask any IT team if they have backups. Almost all say yes. Then ask when they last actually tested a restore. Silence. A backup nobody verified isn't certainty — it's hope. Veeam plus automation turns that hope into certainty.

Why Veeam

Veeam is the de-facto industry standard for backup and archiving across environments — virtual, physical, cloud. Its strength isn't only backup but the API that lets you drive the whole process with code.

Backups that test themselves

The key thing we build: automated recoverability verification. Ansible, via the Veeam API, periodically restores a backup into an isolated environment, runs checks (does it boot? does the service respond?) and sends a report. If something fails, you know before a real disaster.

• One-click DR — the whole disaster-recovery scenario as a playbook, not a 100-page runbook.
• Compliance — for NIS2/DORA you prove backups work, not just exist.
• 3-2-1-1-0 — the backup rule enforced automatically, including an immutable copy.

# Automated recoverability verification — restore into an isolated lab
- name: Assert Tier-1 backups can actually be restored
  hosts: localhost
  tasks:
    - name: Instant Recovery into verify-lab
      ansible.builtin.uri:
        url: "https://veeam.local:9419/api/v1/restore/instantRecovery"
        method: POST
        headers: { Authorization: "Bearer {{ veeam_token }}" }
        body_format: json
        body:
          backupId: "{{ item.backup_id }}"
          restorePoint: latest
          targetRepository: "isolated-verify-lab"   # isolated from production
      loop: "{{ tier1_workloads }}"
    - name: Smoke-test the restored service
      ansible.builtin.uri:
        url: "https://{{ item.test_ip }}/healthz"
        status_code: 200
      retries: 10
      delay: 30
      loop: "{{ tier1_workloads }}"
    - name: Report result to Zabbix
      ansible.builtin.debug:
        msg: "Recovery OK — {{ tier1_workloads | length }} workloads verified"

Key point: this runs nightly as a cron. A backup nobody tested is just hope — this turns it into certainty. Veeam API: REST API docs.

Reality check

Automated restore testing costs compute and storage — it needs an isolated environment. But the cost of an outage with no working backup is orders of magnitude higher. That's an investment, not a cost.