AWS Security ChangesHomeSearch

AWS aws-backup documentation change

Service: aws-backup · 2025-06-13 · Documentation low

File: aws-backup/latest/devguide/security-iam-awsmanpol.md

Summary

Added permissions to AWSBackupServiceRolePolicyForRestores for FSx Multi-AZ restores

Security assessment

Documents IAM policy changes required for new functionality (FSx Multi-AZ restores). While IAM policies are security-relevant, this is a feature update rather than a security fix.

Diff

diff --git a/aws-backup/latest/devguide/security-iam-awsmanpol.md b/aws-backup/latest/devguide/security-iam-awsmanpol.md
index 07190fc83..b63fba8dc 100644
--- a//aws-backup/latest/devguide/security-iam-awsmanpol.md
+++ b//aws-backup/latest/devguide/security-iam-awsmanpol.md
@@ -666,0 +667,6 @@ Change | Description | Date
+AWSBackupServiceRolePolicyForRestores – Update to an existing policy |  AWS Backup added the following permissions to this policy:
+
+  * `ec2:DescribeRouteTables`
+  * `ec2:CreateTags`
+
+These permissions are necessary to allow customers to restore Amazon FSx for OpenZFS Multi-availability zone (Multi-AZ) snapshots through AWS Backup. | May 27, 2025