AWS aws-backup high security documentation change
Summary
Added Multi-party approval integration details and updated navigation links
Security assessment
Documents Multi-party approval integration to enable recovery during account inaccessibility, directly addressing business continuity security controls for critical backups.
Diff
diff --git a/aws-backup/latest/devguide/logicallyairgappedvault.md b/aws-backup/latest/devguide/logicallyairgappedvault.md index d7df5343b..54e0ebc10 100644 --- a//aws-backup/latest/devguide/logicallyairgappedvault.md +++ b//aws-backup/latest/devguide/logicallyairgappedvault.md @@ -15 +15 @@ Logically air-gapped vaults come equipped with additional protection features; e -You can choose to integrate with [AWS Resource Access Manager](https://docs.aws.amazon.com/ram/latest/userguide/working-with-sharing-create.html) (RAM) to share a logically air-gapped vault with other AWS accounts (including accounts in other organizations) so that the backups stored within the vault can be restored from an account with which the vault is shared, if needed for data loss recovery or [restore testing](./restore-testing.html). As part of this added security, a logically air-gapped vault stores its backups in an AWS Backup service owned account (which results in backups shown as shared outside your organization in modify attribute items in AWS CloudTrail logs). +You can integrate your logically air-gapped vaults with [Multi-party approval](./multipartyapproval.html) to eanble recovery of backups in the vaults even if the vault-owning account is inaccessible, which helps to maintain business continuity. Further more, you can choose to integrate with [AWS Resource Access Manager](https://docs.aws.amazon.com/ram/latest/userguide/working-with-sharing-create.html) (RAM) to share a logically air-gapped vault with other AWS accounts (including accounts in other organizations) so that the backups stored within the vault can be restored from an account with which the vault is shared, if needed for data loss recovery or [restore testing](./restore-testing.html). As part of this added security, a logically air-gapped vault stores its backups in an AWS Backup service owned account (which results in backups shown as shared outside your organization in modify attribute items in AWS CloudTrail logs). @@ -42,0 +43,2 @@ See [Feature availability by resource](./backup-feature-availability.html#featur + * [Multi-party approval for logically air-gapped vaults](./multipartyapproval.html) + @@ -516 +518 @@ Backup vault creation and deletion -Vault access policies +Multi-party approval for logically air-gapped vaults