AWS aws-backup medium security documentation change

Service: aws-backup · 2025-05-10 · Security-related medium

File: aws-backup/latest/devguide/turning-on-resource-tracking.md

Summary

Removed references to AWS Config resource compliance checks and simplified configuration steps

Security assessment

Removing 'AWS::Config::ResourceCompliance' tracking may reduce visibility into compliance status, impacting security monitoring capabilities for AWS Backup Audit Manager.

Diff

diff --git a/aws-backup/latest/devguide/turning-on-resource-tracking.md b/aws-backup/latest/devguide/turning-on-resource-tracking.md
index 700726b1b..0d8508d5c 100644
--- a//aws-backup/latest/devguide/turning-on-resource-tracking.md
+++ b//aws-backup/latest/devguide/turning-on-resource-tracking.md
@@ -48,4 +47,0 @@ Charges apply when you turn on resource tracking. For information about resource
-###### Note
-
-AWS Backup Audit Manager requires `AWS Config: resource compliance` for every control.
-
@@ -104,24 +100 @@ Your recorder is not enabled. Continue to step 2 to create your recorder.
-Since you enabled all resources you already turned on resource tracking. You do not need to complete the rest of this procedure to use AWS Backup Audit Manager.
-
-    3. If your `ConfigurationRecorders` is not empty, but you have not enabled recording for all resources, add backup resources to your existing recorder using the following command. Then skip to step 3.
-        
-                $ aws configservice describe-configuration-recorders
-        {
-          "ConfigurationRecorders":[
-            {
-              "name":"default",
-              "roleARN":"arn:aws:iam::accountId:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig",
-              "recordingGroup":{
-                "allSupported":false,
-                "includeGlobalResourceTypes":false,
-                "resourceTypes":[
-                  "AWS::Backup::BackupPlan",
-                  "AWS::Backup::BackupSelection",
-                  "AWS::Backup::BackupVault",
-                  "AWS::Backup::RecoveryPoint",
-                  "AWS::Config::ResourceCompliance"
-                ]
-              }
-            }
-          ]
-        }
+Because you enabled all resources you already turned on resource tracking. You do not need to complete the rest of this procedure to use AWS Backup Audit Manager.
@@ -134 +107 @@ Since you enabled all resources you already turned on resource tracking. You do
-    'AWS::Backup::BackupVault','AWS::Backup::RecoveryPoint','AWS::Config::ResourceCompliance']"
+    'AWS::Backup::BackupVault','AWS::Backup::RecoveryPoint']"
@@ -154,2 +127 @@ Verify that it has the AWS Backup Audit Manager resource types by comparing your
-              "AWS::Backup::RecoveryPoint",
-              "AWS::Config::ResourceCompliance"
+              "AWS::Backup::RecoveryPoint"