AWS aws-backup medium security documentation change
Summary
Simplified service-linked role description to focus on backup creation/deletion permissions
Security assessment
Removed explicit exclusion of EC2 from backup deletion permissions. This could indicate expanded deletion permissions for EC2 backups via the service role, potentially introducing unintended data loss risks if misconfigured.
Diff
diff --git a/aws-backup/latest/devguide/using-service-linked-roles-AWSServiceRoleForBackup.md b/aws-backup/latest/devguide/using-service-linked-roles-AWSServiceRoleForBackup.md index 8df5aed19..7ac44c10e 100644 --- a//aws-backup/latest/devguide/using-service-linked-roles-AWSServiceRoleForBackup.md +++ b//aws-backup/latest/devguide/using-service-linked-roles-AWSServiceRoleForBackup.md @@ -19,3 +19 @@ For information about other services that support service-linked roles, see [AWS -AWS Backup uses the service-linked role named **AWSServiceRoleForBackup** – Provides AWS Backup permissions to list resources you can back up and to copy backups. - -AWS Backup also uses the role to delete all backups for all resource types except for Amazon EC2. +AWS Backup uses the service-linked role named **AWSServiceRoleForBackup** to create and delete backups of your AWS resources on your behalf.