AWS aws-backup documentation change
Summary
Multiple corrections including CloudTrail logging guidance, storage class details, and cost-related mentions (including GuardDuty)
Security assessment
Clarifies operational best practices (e.g., avoiding CloudTrail loops) and cost considerations. While GuardDuty is a security service, the reference here is purely about cost estimation, not security functionality.
Diff
diff --git a/aws-backup/latest/devguide/s3-backups.md b/aws-backup/latest/devguide/s3-backups.md index 51c9c131c..8a44e5705 100644 --- a//aws-backup/latest/devguide/s3-backups.md +++ b//aws-backup/latest/devguide/s3-backups.md @@ -57 +57 @@ Object key names that include characters not in this list might be excluded from - * CloudTrail logging – If you log data read events, you must have CloudTrail logs to a different target bucket. If you save CloudTrail logs in the bucket that they log, there is an infinite loop, which can cause unexpected charges. + * CloudTrail logging – If you log data read events, you must have CloudTrail logs delivered to a different target bucket. If you save CloudTrail logs in the bucket that they log, there is an infinite loop, which can cause unexpected charges. @@ -95 +95 @@ Backups of an object in the storage class [S3 Intelligent-Tiering (INT)](https:/ -Backups that access Infrequent Access tiers, including S3 Standard - Infrequently Access (IA) and S3 One Zone-IA classes, move under the S3 storage charge of Frequent Access (applies to Infrequent Access or Archive Instant Access tiers). +Backups that access Infrequent Access tiers, including S3 Standard - Infrequent Access (IA) and S3 One Zone-IA classes, move under the S3 storage charge of Frequent Access (applies to Infrequent Access or Archive Instant Access tiers). @@ -97 +97 @@ Backups that access Infrequent Access tiers, including S3 Standard - Infrequentl -With the exception of Glacier Instant Retrieval, archived storage classes are not supported. +The archived storage classes S3 Glacier Flexible Retrieval and S3 Glacier Deep Archive are not supported. @@ -215 +215 @@ Similar retrieval costs apply to buckets with objects in S3-IA and S3 One Zone-I - * AWS KMS, CloudTrail, and Amazon CloudWatch features that are part of your backup strategy can result in additional costs beyond S3 bucket data storage. See the following for information on adjusting these features: + * Using features of AWS KMS, CloudTrail, Amazon CloudWatch, and Amazon GuardDuty as part of your backup strategy can result in additional costs beyond S3 bucket data storage. See the following for information on adjusting these features: @@ -232,0 +233,2 @@ Similar retrieval costs apply to buckets with objects in S3-IA and S3 One Zone-I + * [Estimating GuardDuty usage cost](https://docs.aws.amazon.com/guardduty/latest/ug/monitoring_costs.html) in the _Amazon GuardDuty User Guide_. +