AWS aws-backup documentation change

Service: aws-backup · 2025-10-16 · Documentation low

File: aws-backup/latest/devguide/API_DescribeBackupJob.md

Summary

Added documentation for encryption-related fields (EncryptionKeyArn, IsEncrypted), recovery point lifecycle management, and vault lock state/type details

Security assessment

The changes document encryption status, KMS key usage, and vault security configurations (including air-gapped vaults), which are security features. However, there's no indication these changes address a specific vulnerability.

Diff

diff --git a/aws-backup/latest/devguide/API_DescribeBackupJob.md b/aws-backup/latest/devguide/API_DescribeBackupJob.md
index 7a7be6a96..eecff6eba 100644
--- a//aws-backup/latest/devguide/API_DescribeBackupJob.md
+++ b//aws-backup/latest/devguide/API_DescribeBackupJob.md
@@ -55,0 +56 @@ The request does not have a request body.
+          "[BackupPlanName](./API_RecoveryPointCreator.html#Backup-Type-RecoveryPointCreator-BackupPlanName)": "**_string_** ",
@@ -57 +58,4 @@ The request does not have a request body.
-          "[BackupRuleId](./API_RecoveryPointCreator.html#Backup-Type-RecoveryPointCreator-BackupRuleId)": "**_string_** "
+          "[BackupRuleCron](./API_RecoveryPointCreator.html#Backup-Type-RecoveryPointCreator-BackupRuleCron)": "**_string_** ",
+          "[BackupRuleId](./API_RecoveryPointCreator.html#Backup-Type-RecoveryPointCreator-BackupRuleId)": "**_string_** ",
+          "[BackupRuleName](./API_RecoveryPointCreator.html#Backup-Type-RecoveryPointCreator-BackupRuleName)": "**_string_** ",
+          "[BackupRuleTimezone](./API_RecoveryPointCreator.html#Backup-Type-RecoveryPointCreator-BackupRuleTimezone)": "**_string_** "
@@ -59,0 +64 @@ The request does not have a request body.
+       "EncryptionKeyArn": "**_string_** ",
@@ -62,0 +68 @@ The request does not have a request body.
+       "IsEncrypted": **_boolean_** ,
@@ -68,0 +75,5 @@ The request does not have a request body.
+       "RecoveryPointLifecycle": { 
+          "[DeleteAfterDays](./API_Lifecycle.html#Backup-Type-Lifecycle-DeleteAfterDays)": **_number_** ,
+          "[MoveToColdStorageAfterDays](./API_Lifecycle.html#Backup-Type-Lifecycle-MoveToColdStorageAfterDays)": **_number_** ,
+          "[OptInToArchiveForSupportedResources](./API_Lifecycle.html#Backup-Type-Lifecycle-OptInToArchiveForSupportedResources)": **_boolean_**
+       },
@@ -74 +85,3 @@ The request does not have a request body.
-       "StatusMessage": "**_string_** "
+       "StatusMessage": "**_string_** ",
+       "VaultLockState": "**_string_** ",
+       "VaultType": "**_string_** "
@@ -197,0 +211,7 @@ Type: Timestamp
+**EncryptionKeyArn **
+    
+
+The Amazon Resource Name (ARN) of the KMS key used to encrypt the backup. This can be a customer-managed key or an AWS managed key, depending on the vault configuration.
+
+Type: String
+
@@ -218,0 +239,7 @@ Type: Timestamp
+**IsEncrypted **
+    
+
+A boolean value indicating whether the backup is encrypted. All backups in AWS Backup are encrypted, but this field indicates the encryption status for transparency.
+
+Type: Boolean
+
@@ -262,0 +290,13 @@ Type: String
+**RecoveryPointLifecycle **
+    
+
+Specifies the time period, in days, before a recovery point transitions to cold storage or is deleted.
+
+Backups transitioned to cold storage must be stored in cold storage for a minimum of 90 days. Therefore, on the console, the retention setting must be 90 days greater than the transition to cold after days setting. The transition to cold after days setting can't be changed after a backup has been transitioned to cold.
+
+Resource types that can transition to cold storage are listed in the [Feature availability by resource](https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-feature-availability.html#features-by-resource) table. AWS Backup ignores this expression for other resource types.
+
+To remove the existing lifecycle and retention periods and keep your recovery points indefinitely, specify -1 for `MoveToColdStorageAfterDays` and `DeleteAfterDays`.
+
+Type: [Lifecycle](./API_Lifecycle.html) object
+
@@ -308,0 +349,14 @@ Type: String
+**VaultLockState **
+    
+
+The lock state of the backup vault. For logically air-gapped vaults, this indicates whether the vault is locked in compliance mode. Valid values include `LOCKED` and `UNLOCKED`.
+
+Type: String
+
+**VaultType **
+    
+
+The type of backup vault where the recovery point is stored. Valid values are `BACKUP_VAULT` for standard backup vaults and `LOGICALLY_AIR_GAPPED_BACKUP_VAULT` for logically air-gapped vaults.
+
+Type: String
+