AWS Security ChangesHomeSearch

AWS aws-backup documentation change

Service: aws-backup · 2025-06-04 · Documentation low

File: aws-backup/latest/devguide/eventbridge.md

Summary

Added documentation for 'Recovery point indexing events' including state examples (ACTIVE, DELETED, FAILED) and detailed event payload structures

Security assessment

The change documents new event types related to recovery point indexing status. While this improves operational visibility and could help monitor backup integrity, there is no evidence of addressing a specific security vulnerability. The documentation addition relates to security features by enabling monitoring of backup index states.

Diff

diff --git a/aws-backup/latest/devguide/eventbridge.md b/aws-backup/latest/devguide/eventbridge.md
index 5d938ae06..36c5dac87 100644
--- a//aws-backup/latest/devguide/eventbridge.md
+++ b//aws-backup/latest/devguide/eventbridge.md
@@ -5 +5 @@
-Backup Job eventsBackup Plan eventsBackup Vault eventsCopy Job eventsRecovery Point eventsRegion Settings eventsRestore Job events
+Backup Job eventsBackup Plan eventsBackup Vault eventsCopy Job eventsRecovery Point eventsRegion Settings eventsRestore Job eventsRecovery point indexing events
@@ -39,0 +40,2 @@ You can alternatively use the AWS Backup notification API to track AWS Backup ev
+  * Recovery point indexing events
+
@@ -796,0 +799,104 @@ The following are example events. Note that your use case of a restore job will
+## Recovery point indexing events
+
+The following are example events.
+
+###### State
+
+  * ACTIVE
+
+  * DELETED
+
+  * FAILED
+
+
+
+
+### State: ACTIVE
+    
+    
+    {
+      "version":"0",
+      "id":"ab32977c-378d-2122-e985-fgh4596f0709",
+      "detail-type":"Recovery Point Index State Change",
+      "source":"aws.backup",
+      "account":"1112233445566",
+      "time":"2023-12-15T21:39:07Z",
+      "region":"us-west-2",
+      "resources":[
+        "arn":"aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456"
+      ],
+      "detail":{
+        "recoveryPointArn":"arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456",
+        "accountId":"1112233445566",
+        "indexStatus":"ACTIVE",
+        "iamRoleArn":"arn:aws:iam::1112233445566:role/BackupIndexRole",
+        "resourceType":"EBS",
+        "backupVaultArn":"arn:aws:cryo:us-west-2:1112233445566:pod/backup-pod-12345",
+        "indexCreationTime":"2025-05-25T21:38:31.152Z",
+        "isIndexingContinuous":false,
+        "sourceResourceArn":"arn:aws:ec2:us-west-2:1112233445566:volume/vol-01234567890abcdef",
+        "backupCreationTime":"2023-12-15T21:38:00.000Z",
+        "indexStatusMessage":"An AWS Backup recovery point index was successfully completed. Indexed recovery point arn : arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456",
+        "indexCompletionTime":"2025-05-25T21:39:05.689Z",
+      }
+    }
+
+### State: DELETED
+    
+    
+    {
+      "version":"0",
+      "id":"ab32977c-378d-2122-e985-fgh4596f0709",
+      "detail-type":"Recovery Point Index State Change",
+      "source":"aws.backup",
+      "account":"1112233445566",
+      "time":"2023-12-15T21:39:07Z",
+      "region":"us-west-2",
+      "resources":[
+        "arn":"aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456"
+      ],
+      "detail":{
+        "recoveryPointArn":"arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456",
+        "accountId":"1112233445566",
+        "indexStatus":"DELETED",
+        "iamRoleArn":"arn:aws:iam::1112233445566:role/BackupIndexRole",
+        "resourceType":"EBS",
+        "backupVaultArn":"arn:aws:cryo:us-west-2:1112233445566:pod/backup-pod-12345",
+        "indexCreationTime":"2025-05-25T21:38:31.152Z",
+        "isIndexingContinuous":false,
+        "sourceResourceArn":"arn:aws:ec2:us-west-2:1112233445566:volume/vol-01234567890abcdef",
+        "backupCreationTime":"2023-12-15T21:38:00.000Z",
+        "indexStatusMessage":"An AWS Backup recovery point index was deleted. Indexed recovery point arn : arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456",
+        "indexDeletionTime":"2025-05-27T22:39:05.689Z",
+      }
+    }
+
+### State: FAILED
+    
+    
+    {
+      "version":"0",
+      "id":"ab32977c-378d-2122-e985-fgh4596f0709",
+      "detail-type":"Recovery Point Index State Change",
+      "source":"aws.backup",
+      "account":"1112233445566",
+      "time":"2023-12-15T21:39:07Z",
+      "region":"us-west-2",
+      "resources":[
+        "arn":"aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456"
+      ],
+      "detail":{
+        "recoveryPointArn":"arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456",
+        "accountId":"1112233445566",
+        "indexStatus":"FAILED",
+        "iamRoleArn":"arn:aws:iam::1112233445566:role/BackupIndexRole",
+        "resourceType":"EBS",
+        "backupVaultArn":"arn:aws:cryo:us-west-2:1112233445566:pod/backup-pod-12345",
+        "indexCreationTime":"2025-05-25T21:38:31.152Z",
+        "isIndexingContinuous":false,
+        "sourceResourceArn":"arn:aws:ec2:us-west-2:1112233445566:volume/01234567890abcdef",
+        "backupCreationTime":"2023-12-15T21:38:00.000Z",
+        "indexStatusMessage":"An AWS Backup recovery point index failed to create. Indexed recovery point arn : arn:aws:backup:us-west-2:1112233445566:recovery-point:abcd1234-5678-abcd-9012-abcdef123456",
+      }
+    }
+