AWS aws-backup documentation change
Summary
Expanded backup report templates with additional fields including encryption details, vault properties, and lifecycle settings. Added sample JSON outputs with security-related fields like encryptionKeyArn, isEncrypted, vaultLockStatus, and retention policies.
Security assessment
The changes add documentation about encryption status, KMS keys, and vault security configurations which are security features, but there's no evidence this addresses a specific vulnerability. Enhances visibility into security controls rather than fixing an issue.
Diff
diff --git a/aws-backup/latest/devguide/choosing-report-template.md b/aws-backup/latest/devguide/choosing-report-template.md index 27242c20f..47bbce801 100644 --- a//aws-backup/latest/devguide/choosing-report-template.md +++ b//aws-backup/latest/devguide/choosing-report-template.md @@ -13 +13 @@ A report template defines the information that your report plan includes in your -**Backup report templates**. These templates give you daily updates on your backup, restore, or copy jobs. You can use these reports to monitor your operational posture and identify any failures that might need further action. The following table lists each backup report template name and its sample output. +**Backup report templates**. These templates give you daily updates on your backup, restore, or copy jobs with expanded context including vault properties, backup plan details, and lifecycle settings. You can use these reports to monitor your operational posture, understand backup configurations, and identify any failures that might need further action. The following table lists each backup report template name and its sample output. @@ -30,0 +31 @@ Backup report template | Sample report in JSON format + "resourceName": "MyEC2Instance", @@ -32,0 +34,9 @@ Backup report template | Sample report in JSON format + "initiationDate": "2021-07-14T23:53:47.229Z", + "backupPlanName": "MyBackupPlan", + "backupRuleName": "DailyBackups", + "backupRuleSchedule": "cron(0 5 ? * * *)", + "backupRuleTimezone": "UTC", + "startWindowEnd": "2021-07-14T23:53:47.229Z", + "backupOptions": {}, + "isParentJob": false, + "parentJobId": null, @@ -39,0 +50,7 @@ Backup report template | Sample report in JSON format + "vaultType": "BACKUP_VAULT", + "vaultLockStatus": "UNLOCKED", + "isEncrypted": true, + "encryptionKeyArn": "arn:aws:kms:us-west-2:112233445566:key/12345678-1234-1234-1234-123456789012", + "deleteAfterDays": 30, + "moveToColdAfterDays": 7, + "enableArchive": false, @@ -59,0 +77,10 @@ Backup report template | Sample report in JSON format + "resourceName": "string", + "initiationDate": "2021-07-14T15:48:31Z", + "backupPlanName": "string", + "backupRuleName": "string", + "backupRuleSchedule": "string", + "backupRuleTimezone": "string", + "startWindowEnd": "2021-07-14T15:48:31Z", + "backupOptions": {}, + "isParentJob": false, + "parentJobId": null, @@ -66,0 +94,7 @@ Backup report template | Sample report in JSON format + "vaultType": "BACKUP_VAULT", + "vaultLockStatus": "string", + "isEncrypted": true, + "encryptionKeyArn": "arn:aws:kms:us-west-2:112233445566:key/...", + "deleteAfterDays": 30, + "moveToColdAfterDays": 7, + "enableArchive": false, @@ -83,0 +118,19 @@ Backup report template | Sample report in JSON format + "resourceName": "string", + "initiationDate": "2021-07-14T15:53:30Z", + "backupPlanName": "string", + "backupRuleName": "string", + "backupRuleSchedule": "string", + "backupRuleTimezone": "string", + "startWindowEnd": "2021-07-14T15:53:30Z", + "backupOptions": {}, + "isParentJob": false, + "parentJobId": null, + "vaultType": "BACKUP_VAULT", + "vaultLockStatus": "string", + "isEncrypted": true, + "encryptionKeyArn": "arn:aws:kms:us-west-2:112233445566:key/...", + "deleteAfterDays": 30, + "moveToColdAfterDays": 7, + "enableArchive": false, + "sourceResourceArn": "arn:aws:ec2:us-west-2:112233445566:instance/i-0bc877aee7782ba75", + "backupVaultArn": "arn:aws:backup:us-west-2:112233445566:backup-vault:Default",