AWS fsx documentation change
Summary
Added restrictions for Multi-AZ restorations and KMS key requirements for large capacity restores
Security assessment
Introduces security-related operational constraints around encryption key management for backups, but doesn't indicate a vulnerability fix
Diff
diff --git a/fsx/latest/OpenZFSGuide/restoring-backups.md b/fsx/latest/OpenZFSGuide/restoring-backups.md index 18e45ee48..186e7aa81 100644 --- a/fsx/latest/OpenZFSGuide/restoring-backups.md +++ b/fsx/latest/OpenZFSGuide/restoring-backups.md @@ -7 +7 @@ -You can use an available backup to create a new file system, effectively restoring a point-in-time snapshot of another file system. You can restore a backup using the AWS Backup or Amazon FSx consoles, AWS CLI, or one of the AWS SDKs. For more information on using the AWS Backup console, see [Restoring backups in AWS Backup](./aws-backup-and-fsx.html#restoring-backups-bkp) +You can use an available backup to create a new file system, effectively restoring a point-in-time snapshot of another file system. You can restore a backup using the Amazon FSx console, AWS CLI, or one of the AWS SDKs. You can also restore backups using the AWS Backup console. For more information about using the AWS Backup console, see [Restore an FSx file System](https://docs.aws.amazon.com/https://docs.aws.amazon.com/aws-backup/latest/devguide/restoring-fsx.html) in the AWS Backup Developer Guide. @@ -9 +9 @@ You can use an available backup to create a new file system, effectively restori -Restoring a backup to a new file system takes the same amount of time as creating a new file system. The data restored from the backup is lazy-loaded onto the file system, during which time you will experience slightly higher latency. +###### Note @@ -11 +11,3 @@ Restoring a backup to a new file system takes the same amount of time as creatin -The following procedure guides you through how to restore a backup to a new file system using the Amazon FSx console. +Backups of Multi-AZ FSx for OpenZFS file systems can be restored only by using the Amazon FSx console or CLI. + +Restoring a backup to a new file system takes the same amount of time as creating a new file system. The data restored from the backup is lazy-loaded onto the file system, during which time you will experience slightly higher latency. @@ -56,0 +59,4 @@ You can increase the amount of throughput capacity as needed at any time after y +###### Note + +When restoring a file system with a storage capacity greater than 144 TiB, you must use the same KMS key that you used when creating the backup. If you want to restore the file system with a new KMS key, you must first copy the backup using the new KMS key, and then restore the file system with this backup. +