AWS aws-backup medium security documentation change
Summary
Updated IAM policy reference from AWSBackupServicePolicyForRestores to AWSBackupServiceRolePolicyForRestores
Security assessment
The change corrects the name of an IAM policy required for restore testing operations. Using the correct IAM policy name is critical for proper security permissions, as incorrect policies could lead to privilege escalation or insufficient access controls.
Diff
diff --git a/aws-backup/latest/devguide/restore-testing.md b/aws-backup/latest/devguide/restore-testing.md index 5d440b41f..80e7b44a8 100644 --- a//aws-backup/latest/devguide/restore-testing.md +++ b//aws-backup/latest/devguide/restore-testing.md @@ -151 +151 @@ To navigate back to the restore testing plan to which you want to add resources, - 2. **Restore IAM role:** The test must use an Identity and Access Management (IAM) role you designate. You can choose the AWS Backup default role or a different one. If the AWS Backup default does not yet exist as you finish this process, AWS Backup will create it for you automatically with the necessary permissions. The IAM role you choose for restore testing must contain the permissions found in [AWSBackupServicePolicyForRestores](https://docs.aws.amazon.com/aws-backup/latest/devguide/security-iam-awsmanpol.html#aws-managed-policies). + 2. **Restore IAM role:** The test must use an Identity and Access Management (IAM) role you designate. You can choose the AWS Backup default role or a different one. If the AWS Backup default does not yet exist as you finish this process, AWS Backup will create it for you automatically with the necessary permissions. The IAM role you choose for restore testing must contain the permissions found in [AWSBackupServiceRolePolicyForRestores](https://docs.aws.amazon.com/aws-backup/latest/devguide/security-iam-awsmanpol.html#aws-managed-policies).