AWS aws-backup documentation change
Summary
Added requester role clarifications and simplified instruction wording
Security assessment
Improves documentation clarity around access request roles but does not introduce new security features or address vulnerabilities. Focuses on workflow clarification rather than security controls.
Diff
diff --git a/aws-backup/latest/devguide/multipartyapproval-tasks-requester.md b/aws-backup/latest/devguide/multipartyapproval-tasks-requester.md index 186ca809f..21dd165d7 100644 --- a//aws-backup/latest/devguide/multipartyapproval-tasks-requester.md +++ b//aws-backup/latest/devguide/multipartyapproval-tasks-requester.md @@ -10,0 +11,2 @@ Associate a Multi-party approval team with a LAG vaultRequest access to a logica +Requester: **User with access to account that owns the logically air-gapped vault**. + @@ -28 +30 @@ Console - 6. Enter an optional requester comment, explaining the reason for the association. + 6. _Optional_ Enter a comment explaining the reason for the association. @@ -53 +55,5 @@ If this is the first approval team to be associated with the vault, the team wil -You can request access to a logically air-gapped vault in another account (step 6 in the [Overview](./multipartyapproval.html#multipartyapproval-overview)). After an approval team has granted the request, AWS Backup creates a restore access backup vault in your designated recovery account so that account will have temporary access to recovery points in the connected logically air-gapped vault. +Requester: **User with access to recovery account**. + +You can request access to a logically air-gapped vault in another account (step 6 in the [Overview](./multipartyapproval.html#multipartyapproval-overview)). + +After an approval team has granted the request, AWS Backup creates a restore access backup vault in your designated recovery account so that account will have access to recovery points in the connected logically air-gapped vault. @@ -105,0 +112,2 @@ You can check the status of the vault using: +Requester: **Administrator of account that owns the logically air-gapped vault**. + @@ -146,0 +155,2 @@ The current MPA approval team members will receive a notification to approve the +Requester: **Administrator of account that owns the logically air-gapped vault**. + @@ -197,0 +208,2 @@ The approval team members will receive a notification to approve the request. On +Requester: **Administrator of account that owns the logically air-gapped vault**. +