AWS Security ChangesHomeSearch

AWS aws-backup documentation change

Service: aws-backup · 2025-11-13 · Documentation low

File: aws-backup/latest/devguide/configure-infrastructure-bgw.md

Summary

Removed hardware requirements section and added details about dual-stack endpoints (IPv4/IPv6 support) for gateway communication

Security assessment

The endpoint updates improve connectivity options but lack explicit security context. Hardware requirements removal is editorial. No evidence of security fixes or new security features.

Diff

diff --git a/aws-backup/latest/devguide/configure-infrastructure-bgw.md b/aws-backup/latest/devguide/configure-infrastructure-bgw.md
index 4d586f90a..8c265e24c 100644
--- a//aws-backup/latest/devguide/configure-infrastructure-bgw.md
+++ b//aws-backup/latest/devguide/configure-infrastructure-bgw.md
@@ -5 +5 @@
-Network configurationFirewall configurationConfigure your gateway for multiple NICs in VMwareHardware requirementsVMware permissions
+Network configurationFirewall configurationConfigure your gateway for multiple NICs in VMwareVMware permissions
@@ -87,0 +88,6 @@ Backup gateway requires access to the following service endpoints to communicate
+**Endpoint types**
+
+**Standard endpoints** : Support IPv4 traffic between your gateway appliance and AWS.
+
+The following service endpoints are required by all gateways for control path (`anon-cp`, `client-cp`, `proxy-app`) and data path (`dp-1`) operations.
+    
@@ -89,2 +94,0 @@ Backup gateway requires access to the following service endpoints to communicate
-    proxy-app.backup-gateway.region.amazonaws.com:443
-    dp-1.backup-gateway.region.amazonaws.com:443
@@ -92,0 +97,12 @@ Backup gateway requires access to the following service endpoints to communicate
+    proxy-app.backup-gateway.region.amazonaws.com:443  
+    dp-1.backup-gateway.region.amazonaws.com:443
+
+**Dual-stack endpoints** : Support both IPv4 and IPv6 traffic between your gateway appliance and AWS.
+
+The following dual-stack service endpoints are required by all gateways for control path (activation, controlplane, proxy) and data path (dataplane) operations.
+    
+    
+    activation-backup-gateway.region.api.aws:443  
+    controlplane-backup-gateway.region.api.aws:443  
+    proxy-backup-gateway.region.api.aws:443  
+    dataplane-backup-gateway.region.api.aws:443
@@ -172,13 +187,0 @@ To do these:
-## Hardware requirements
-
-You must be able to dedicate the following minimum resources on a virtual machine host for the Backup gateway:
-
-  * 4 virtual processors
-
-  * 8 GB of reserved RAM
-
-  * 80 GB disk space
-
-
-
-