AWS efs documentation change
Summary
Clarified that automatic backups are enabled by default only for One Zone file systems when using CLI/API, and maintained for console-created systems
Security assessment
The change documents backup policy defaults which help prevent data loss, but does not address a specific security vulnerability. Backups are a security feature for data protection, hence adds to security documentation.
Diff
diff --git a/efs/latest/ug/awsbackup.md b/efs/latest/ug/awsbackup.md index 285c15b99..4412ee0ed 100644 --- a//efs/latest/ug/awsbackup.md +++ b//efs/latest/ug/awsbackup.md @@ -9 +9 @@ How AWS Backup works with Amazon EFSRequired IAM permissionsBackup performance -Amazon EFS is natively integrated with AWS Backup, a fully managed, policy-based service that you can use to create and manage backup policies to protect your data in Amazon EFS. +Amazon EFS is natively integrated with AWS Backup, a fully managed, policy-based service that you can use to create and manage backup policies to protect your data in Amazon EFS. File systems that you create using the Amazon EFS console are automatically backed up by AWS Backup by default. When you use the CLI or API to create a file system, automatic backups are enabled by default only for One Zone file systems. @@ -37 +37 @@ For more information about using AWS Backup, see [Getting started with AWS Backu -File systems that you create using the Amazon EFS console are automatically backed up by AWS Backup by default. You can turn on automatic backups after creating your EFS file system using the AWS CLI or API. The default EFS backup plan uses the AWS Backup recommended settings for automatic backups—daily backups with a 35-day retention period. The backups created using the default EFS backup plan are stored in a default EFS backup vault, which is also created by Amazon EFS on your behalf. The default backup plan and backup vault cannot be deleted. +File systems that you create using the Amazon EFS console are automatically backed up by AWS Backup by default. When you use the CLI or API to create a file system, automatic backups are enabled by default only for One Zone file systems. You can turn on automatic backups after creating your EFS file system using the AWS CLI or API. The default EFS backup plan uses the AWS Backup recommended settings for automatic backups—daily backups with a 35-day retention period. The backups created using the default EFS backup plan are stored in a default EFS backup vault, which is also created by Amazon EFS on your behalf. The default backup plan and backup vault cannot be deleted.