AWS Security ChangesHomeSearch

AWS aws-backup documentation change

Service: aws-backup · 2025-05-16 · Documentation low

File: aws-backup/latest/devguide/restoring-docdb.md

Summary

Updated restore procedure steps with renumbering and added network/security step for Availability Zone selection

Security assessment

Changes involve procedural step renumbering and adding a network/security step for Availability Zone selection. While network/security is mentioned, the change describes infrastructure placement rather than addressing a security vulnerability or weakness.

Diff

diff --git a/aws-backup/latest/devguide/restoring-docdb.md b/aws-backup/latest/devguide/restoring-docdb.md
index 3c784eac4..9f70dee6f 100644
--- a//aws-backup/latest/devguide/restoring-docdb.md
+++ b//aws-backup/latest/devguide/restoring-docdb.md
@@ -23 +23 @@ Restoring a Amazon DocumentDB cluster requires that you specify multiple restore
-  5. In the **Instance specifications** pane, select the DB engine you want to use for the instance.
+  5. In the **Instance specifications** pane, select a DB engine for the instance.
@@ -29 +29,3 @@ You can use letters, numbers, and hyphens, though you cannot have two consecutiv
-  7. In the **Database options** pane, select the database port.
+  7. In the **Network and security** pane, select an Availability Zone, or let us choose one for you.
+
+  8. In the **Database options** pane, select the database port.
@@ -33 +35 @@ This is the TCP/IP port that the DB instance or cluster will use for application
-  8. Also in the **Database options** pane, select the DB cluster parameter group.
+  9. Also in the **Database options** pane, select the DB cluster parameter group.
@@ -37 +39 @@ This is the parameter group associated with this instance's DB cluster. The DB c
-  9. In the **Encryption** pane, select the key that will be used to encrypt this database volume. The default is `aws/rds`. You may alternatively use a customer managed key (CMK).
+  10. In the **Encryption** pane, select the key that will be used to encrypt this database volume. The default is `aws/rds`. You may alternatively use a customer managed key (CMK).
@@ -39 +41 @@ This is the parameter group associated with this instance's DB cluster. The DB c
-  10. In the **Log exports** pane, choose the log types to publish to Amazon CloudWatch Logs. The **IAM role** is already defined. 
+  11. In the **Log exports** pane, choose the log types to publish to Amazon CloudWatch Logs. The **IAM role** is already defined. 
@@ -41 +43 @@ This is the parameter group associated with this instance's DB cluster. The DB c
-  11. In the **Restore role** pane, choose either the default IAM role for the restore job or a different IAM role.
+  12. In the **Restore role** pane, choose either the default IAM role for the restore job or a different IAM role.
@@ -43 +45 @@ This is the parameter group associated with this instance's DB cluster. The DB c
-  12. In the Protected resource tags pane, you may optionally choose to copy tags from the backup to the restored database cluster.
+  13. In the Protected resource tags pane, you may optionally choose to copy tags from the backup to the restored database cluster.
@@ -45 +47 @@ This is the parameter group associated with this instance's DB cluster. The DB c
-  13. After specifying all your settings, choose **Restore backup**.
+  14. After specifying all your settings, choose **Restore backup**.
@@ -49 +51 @@ The **Restore jobs** pane appears. A message at the top of the page provides inf
-  14. After your restore finishes, attach your restored Amazon DocumentDB cluster to an Amazon RDS instance.
+  15. After your restore finishes, attach your restored Amazon DocumentDB cluster to an Amazon RDS instance.