AWS aws-backup documentation change
Summary
Added permissions to AWSBackupServiceRolePolicyForRestores for FSx Multi-AZ restores
Security assessment
Documents IAM policy changes required for new functionality (FSx Multi-AZ restores). While IAM policies are security-relevant, this is a feature update rather than a security fix.
Diff
diff --git a/aws-backup/latest/devguide/security-iam-awsmanpol.md b/aws-backup/latest/devguide/security-iam-awsmanpol.md index 07190fc83..b63fba8dc 100644 --- a//aws-backup/latest/devguide/security-iam-awsmanpol.md +++ b//aws-backup/latest/devguide/security-iam-awsmanpol.md @@ -666,0 +667,6 @@ Change | Description | Date +AWSBackupServiceRolePolicyForRestores – Update to an existing policy | AWS Backup added the following permissions to this policy: + + * `ec2:DescribeRouteTables` + * `ec2:CreateTags` + +These permissions are necessary to allow customers to restore Amazon FSx for OpenZFS Multi-availability zone (Multi-AZ) snapshots through AWS Backup. | May 27, 2025