AWS aws-backup high security documentation change

Service: aws-backup · 2025-03-19 · Security-related high

File: aws-backup/latest/devguide/using-service-linked-roles-AWSServiceRoleForBackupReports.md

Summary

Changed trusted service principal from 'reports.backup.amazonaws.com' to 'backup.amazonaws.com'

Security assessment

Corrects the service principal in the trust relationship, potentially fixing an authorization misconfiguration. Incorrect service principals could lead to privilege escalation risks.

Diff

diff --git a/aws-backup/latest/devguide/using-service-linked-roles-AWSServiceRoleForBackupReports.md b/aws-backup/latest/devguide/using-service-linked-roles-AWSServiceRoleForBackupReports.md
index d01cdc056..eb8f5d31f 100644
--- a/aws-backup/latest/devguide/using-service-linked-roles-AWSServiceRoleForBackupReports.md
+++ b/aws-backup/latest/devguide/using-service-linked-roles-AWSServiceRoleForBackupReports.md
@@ -23 +23 @@ The AWSServiceRoleForBackupReports service-linked role trusts the following serv
-  * `reports.backup.amazonaws.com`
+  * `backup.amazonaws.com`