AWS cli documentation change
Summary
Added documentation for new fields including vault lock states, recovery point lifecycle policies, encryption details, and backup rule scheduling parameters
Security assessment
Added documentation for encryption status (IsEncrypted), KMS key usage (EncryptionKeyArn), and vault lock compliance states (VaultLockState) which are security-related features. However, there is no evidence this addresses a specific security vulnerability - rather it documents existing security controls.
Diff
diff --git a/cli/latest/reference/backup/list-backup-jobs.md b/cli/latest/reference/backup/list-backup-jobs.md index 1de77fbe0..222b83e63 100644 --- a//cli/latest/reference/backup/list-backup-jobs.md +++ b//cli/latest/reference/backup/list-backup-jobs.md @@ -15 +15 @@ - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) » @@ -462,0 +463,8 @@ BackupJobs -> (list) +>> VaultType -> (string) +>> +>>> The type of backup vault where the recovery point is stored. Valid values are `BACKUP_VAULT` for standard backup vaults and `LOGICALLY_AIR_GAPPED_BACKUP_VAULT` for logically air-gapped vaults. +>> +>> VaultLockState -> (string) +>> +>>> The lock state of the backup vault. For logically air-gapped vaults, this indicates whether the vault is locked in compliance mode. Valid values include `LOCKED` and `UNLOCKED` . +>> @@ -466,0 +475,30 @@ BackupJobs -> (list) +>> RecoveryPointLifecycle -> (structure) +>> +>>> Specifies the time period, in days, before a recovery point transitions to cold storage or is deleted. +>>> +>>> Backups transitioned to cold storage must be stored in cold storage for a minimum of 90 days. Therefore, on the console, the retention setting must be 90 days greater than the transition to cold after days setting. The transition to cold after days setting can’t be changed after a backup has been transitioned to cold. +>>> +>>> Resource types that can transition to cold storage are listed in the [Feature availability by resource](https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-feature-availability.html#features-by-resource) table. Backup ignores this expression for other resource types. +>>> +>>> To remove the existing lifecycle and retention periods and keep your recovery points indefinitely, specify -1 for `MoveToColdStorageAfterDays` and `DeleteAfterDays` . +>>> +>>> MoveToColdStorageAfterDays -> (long) +>>> +>>>> The number of days after creation that a recovery point is moved to cold storage. +>>> +>>> DeleteAfterDays -> (long) +>>> +>>>> The number of days after creation that a recovery point is deleted. This value must be at least 90 days after the number of days specified in `MoveToColdStorageAfterDays` . +>>> +>>> OptInToArchiveForSupportedResources -> (boolean) +>>> +>>>> If the value is true, your backup plan transitions supported resources to archive (cold) storage tier in accordance with your lifecycle settings. +>> +>> EncryptionKeyArn -> (string) +>> +>>> The Amazon Resource Name (ARN) of the KMS key used to encrypt the backup. This can be a customer-managed key or an Amazon Web Services managed key, depending on the vault configuration. +>> +>> IsEncrypted -> (boolean) +>> +>>> A boolean value indicating whether the backup is encrypted. All backups in Backup are encrypted, but this field indicates the encryption status for transparency. +>> @@ -538,0 +577,4 @@ BackupJobs -> (list) +>>> BackupPlanName -> (string) +>>> +>>>> The name of the backup plan that created this recovery point. This provides human-readable context about which backup plan was responsible for the backup job. +>>> @@ -545,0 +588,12 @@ BackupJobs -> (list) +>>> +>>> BackupRuleName -> (string) +>>> +>>>> The name of the backup rule within the backup plan that created this recovery point. This helps identify which specific rule triggered the backup job. +>>> +>>> BackupRuleCron -> (string) +>>> +>>>> The cron expression that defines the schedule for the backup rule. This shows the frequency and timing of when backups are automatically triggered. +>>> +>>> BackupRuleTimezone -> (string) +>>> +>>>> The timezone used for the backup rule schedule. This provides context for when backups are scheduled to run in the specified timezone. @@ -635 +689 @@ NextToken -> (string) - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) »