AWS aws-backup documentation change
Summary
Expanded list of overridable metadata parameters for Amazon EBS, EC2, and EFS restore testing configurations
Security assessment
The changes add more configurable parameters (e.g., iops, throughput) but do not address security vulnerabilities or introduce new security features. Encryption settings (KMS keys) were already documented.
Diff
diff --git a/aws-backup/latest/devguide/restore-testing-inferred-metadata.md b/aws-backup/latest/devguide/restore-testing-inferred-metadata.md index 32ef78c76..041734b4e 100644 --- a//aws-backup/latest/devguide/restore-testing-inferred-metadata.md +++ b//aws-backup/latest/devguide/restore-testing-inferred-metadata.md @@ -20,3 +20,3 @@ Resource type | Inferred restore metadata keys and values | Overridable metadata -**Amazon EBS** | `availabilityZone`, whose value is set to a random availability zone `encrypted`, whose value is set to `true` | `availabilityZone` `kmsKeyId` -**Amazon EC2** | `disableApiTermination` value is set to `false` `instanceType` value is set to the instanceType of the recovery point being restored `requiredImdsV2` value is set to `true` | `iamInstanceProfileName` value can be null or `UseBackedUpValue` `instanceType` `requireImdsV2` `securityGroupIds` `subnetId` -**Amazon EFS** | `encrypted` value is set to `true` `file-system-id` value is set to the file system ID of the recovery point being restored `kmsKeyId value` is set to `alias/aws/elasticfilesystem` `newFileSystem` value is set to `true` `performanceMode` value is set to `generalPurpose` | `kmsKeyId` +**Amazon EBS** | `availabilityZone`, whose value is set to a random availability zone `encrypted`, whose value is set to `true` | `availabilityZone` `iops` `kmsKeyId` `throughput` `volumesize` `volumetype` +**Amazon EC2** | `disableApiTermination` value is set to `false` `instanceType` value is set to the instanceType of the recovery point being restored `requiredImdsV2` value is set to `true` | `iamInstanceProfileName` (null or `UseBackedUpValue`) `instanceType` `requireImdsV2` `securityGroupIds` `subnetId` +**Amazon EFS** | `encrypted` value is set to `true` `file-system-id` value is set to the file system ID of the recovery point being restored `kmsKeyId value` is set to `alias/aws/elasticfilesystem` `newFileSystem` value is set to `true` `performanceMode` value is set to `generalPurpose` | `kmsKeyId` `performancemode`