AWS aws-backup documentation change
Summary
Added malware scanning quotas section with GuardDuty integration limits.
Security assessment
Documents operational limits for new malware scanning feature. Enhances security documentation but doesn't address a specific vulnerability.
Diff
diff --git a/aws-backup/latest/devguide/aws-backup-limits.md b/aws-backup/latest/devguide/aws-backup-limits.md index 45353a02e..f53d4d4f9 100644 --- a//aws-backup/latest/devguide/aws-backup-limits.md +++ b//aws-backup/latest/devguide/aws-backup-limits.md @@ -5 +5 @@ -BackupBackup index and search quotasPolicy quotasAmazon Timestream resource quotasAWS Backup Audit Manager quotasRestore testing plan quotasAWS Backup gateway quotasAmazon EKS quotasLogically air-gapped vault quotasRelated quotas +BackupBackup index and search quotasPolicy quotasMalware scanning quotasAmazon Timestream resource quotasAWS Backup Audit Manager quotasRestore testing plan quotasAWS Backup gateway quotasAmazon EKS quotasLogically air-gapped vault quotasRelated quotas @@ -18,0 +19,2 @@ The following quotas apply when working with AWS Backup. + * Malware scanning quotas + @@ -84,0 +87,16 @@ Conditions in a resource assignment in a backup plan | 30 | No +## Malware scanning quotas + +The following table lists quotas for AWS Backup malware scanning with Amazon GuardDuty. + +Name | Default | Adjustable +---|---|--- +Running scan jobs per resource per account | 5 | Yes +Running scan jobs per recovery point per account | 1 | No +Running scan jobs per account | 150 | Yes +Created scan jobs per resource per account | 10 | No +Incremental scan base constraint | 1 | No + +When you hit your created scan jobs per resource per account limit, we will fail oldest queued job. + +You might also encounter quotas imposed by Amazon GuardDuty. For more information, see [Amazon GuardDuty quotas](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_limits.html) in the _AWS General Reference_. +