AWS cli medium security documentation change
Summary
Added documentation for new fields related to copy job destinations including vault types, encryption keys, lifecycle policies, and backup plan details
Security assessment
Added DestinationVaultLockState field documentation about compliance mode locking for air-gapped vaults, and DestinationEncryptionKeyArn field showing encryption controls. These directly relate to data protection security controls.
Diff
diff --git a/cli/latest/reference/backup/list-copy-jobs.md b/cli/latest/reference/backup/list-copy-jobs.md index d0a45eb64..bbf52e094 100644 --- a//cli/latest/reference/backup/list-copy-jobs.md +++ b//cli/latest/reference/backup/list-copy-jobs.md @@ -15 +15 @@ - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) » @@ -350,0 +351,8 @@ CopyJobs -> (list) +>> DestinationVaultType -> (string) +>> +>>> The type of destination backup vault where the copied recovery point is stored. Valid values are `BACKUP_VAULT` for standard backup vaults and `LOGICALLY_AIR_GAPPED_BACKUP_VAULT` for logically air-gapped vaults. +>> +>> DestinationVaultLockState -> (string) +>> +>>> The lock state of the destination backup vault. For logically air-gapped vaults, this indicates whether the vault is locked in compliance mode. Valid values include `LOCKED` and `UNLOCKED` . +>> @@ -354,0 +363,26 @@ CopyJobs -> (list) +>> DestinationEncryptionKeyArn -> (string) +>> +>>> The Amazon Resource Name (ARN) of the KMS key used to encrypt the copied backup in the destination vault. This can be a customer-managed key or an Amazon Web Services managed key. +>> +>> DestinationRecoveryPointLifecycle -> (structure) +>> +>>> Specifies the time period, in days, before a recovery point transitions to cold storage or is deleted. +>>> +>>> Backups transitioned to cold storage must be stored in cold storage for a minimum of 90 days. Therefore, on the console, the retention setting must be 90 days greater than the transition to cold after days setting. The transition to cold after days setting can’t be changed after a backup has been transitioned to cold. +>>> +>>> Resource types that can transition to cold storage are listed in the [Feature availability by resource](https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-feature-availability.html#features-by-resource) table. Backup ignores this expression for other resource types. +>>> +>>> To remove the existing lifecycle and retention periods and keep your recovery points indefinitely, specify -1 for `MoveToColdStorageAfterDays` and `DeleteAfterDays` . +>>> +>>> MoveToColdStorageAfterDays -> (long) +>>> +>>>> The number of days after creation that a recovery point is moved to cold storage. +>>> +>>> DeleteAfterDays -> (long) +>>> +>>>> The number of days after creation that a recovery point is deleted. This value must be at least 90 days after the number of days specified in `MoveToColdStorageAfterDays` . +>>> +>>> OptInToArchiveForSupportedResources -> (boolean) +>>> +>>>> If the value is true, your backup plan transitions supported resources to archive (cold) storage tier in accordance with your lifecycle settings. +>> @@ -404,0 +439,4 @@ CopyJobs -> (list) +>>> BackupPlanName -> (string) +>>> +>>>> The name of the backup plan that created this recovery point. This provides human-readable context about which backup plan was responsible for the backup job. +>>> @@ -411,0 +450,12 @@ CopyJobs -> (list) +>>> +>>> BackupRuleName -> (string) +>>> +>>>> The name of the backup rule within the backup plan that created this recovery point. This helps identify which specific rule triggered the backup job. +>>> +>>> BackupRuleCron -> (string) +>>> +>>>> The cron expression that defines the schedule for the backup rule. This shows the frequency and timing of when backups are automatically triggered. +>>> +>>> BackupRuleTimezone -> (string) +>>> +>>>> The timezone used for the backup rule schedule. This provides context for when backups are scheduled to run in the specified timezone. @@ -485 +535 @@ NextToken -> (string) - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) »