AWS fsx medium security documentation change
Summary
Added documentation for AWS Backup integration, including immutable backups, centralized management, and controlled deletion process
Security assessment
Explicitly mentions protection against accidental/malicious deletion through immutable backups and restricted deletion methods. This addresses data integrity and ransomware protection concerns.
Diff
diff --git a/fsx/latest/OpenZFSGuide/using-backups.md b/fsx/latest/OpenZFSGuide/using-backups.md index 64007c528..0aa06820f 100644 --- a/fsx/latest/OpenZFSGuide/using-backups.md +++ b/fsx/latest/OpenZFSGuide/using-backups.md @@ -5 +5 @@ -Working with automatic daily backupsWorking with user-initiated backups +Working with automatic daily backupsWorking with user-initiated backupsWorking with AWS Backup @@ -7 +7 @@ Working with automatic daily backupsWorking with user-initiated backups -# Working with Amazon FSx for OpenZFS built-in backups +# Protecting your data with backups @@ -20,0 +21,2 @@ Creating regular backups for your file system is a best practice that complement + * Working with AWS Backup + @@ -68,0 +71,25 @@ When you create a user-initiated backup as this procedure described, it has the +## Working with AWS Backup + +AWS Backup is a simple and cost-effective way to protect your data by backing up your Amazon FSx for OpenZFS file systems. AWS Backup is a unified backup service designed to simplify the creation, restoration, and deletion of backups, while providing improved reporting and auditing. AWS Backup makes it easier to develop a centralized backup strategy for legal, regulatory, and professional compliance. AWS Backup also makes protecting your AWS storage file systems, databases, and file systems simpler by providing a central place where you can do the following: + + * Configure and audit the AWS resources that you want to back up. + + * Automate backup scheduling. + + * Set retention policies. + + * Copy backups across AWS Regions and AWS accounts + + * Monitor all recent backup, copy, and restore activity. + + + + +AWS Backup uses the built-in backup functionality of Amazon FSx. Backups taken from the AWS Backup console have the same level of file system consistency and performance, are incremental relative to any other Amazon FSx backups you take of your file system (user-initiated or automatic), and offer the same restore options as backups taken through the Amazon FSx console. If you use AWS Backup to manage these backups, you gain additional functionality, such as unlimited retention options and the ability to create scheduled backups as frequently as every hour. In addition, AWS Backup and Amazon FSx retain your immutable backups even after the source file system is deleted. This protects against accidental or malicious deletion. + +Backups taken by AWS Backup are considered user-initiated backups, and they count toward the user-initiated backup quota for Amazon FSx. You can view and restore backups taken by AWS Backup in the Amazon FSx console, CLI, and API. However, you can't delete backups taken by AWS Backup in the Amazon FSx console, CLI, or API. For more information about how to use AWS Backup to back up your Amazon FSx file systems and how to delete backups, see [Working with Amazon FSx file systems](https://docs.aws.amazon.com/aws-backup/latest/devguide/working-with-supported-services.html#working-with-fsx) in the _AWS Backup Developer Guide_. + +### Deleting backups + +You can't delete backups taken by AWS Backup in the Amazon FSx console, CLI, or API. For information on deleting a backup taken by AWS Backup, see [Backup deletion](https://docs.aws.amazon.com/aws-backup/latest/devguide/deleting-backups.html) in the _AWS Backup Developer Guide_. Deleting a backup is a permanent, unrecoverable action. Any data in a deleted backup is also deleted. Do not delete a backup unless you're sure you won't need that backup again in the future. +