AWS Security ChangesHomeSearch

AWS aws-backup documentation change

Service: aws-backup · 2025-11-22 · Documentation medium

File: aws-backup/latest/devguide/choosing-report-template.md

Summary

Added 'Scanning report templates' section with malware scan job monitoring details

Security assessment

Introduces documentation for malware scanning reports, including fields like 'malwareScanner', 'scanResultStatus', and IAM roles for scans. This enhances security visibility but does not address a specific vulnerability.

Diff

diff --git a/aws-backup/latest/devguide/choosing-report-template.md b/aws-backup/latest/devguide/choosing-report-template.md
index 47bbce801..9fb0cb3aa 100644
--- a//aws-backup/latest/devguide/choosing-report-template.md
+++ b//aws-backup/latest/devguide/choosing-report-template.md
@@ -5 +5 @@
-Backup report templatesCompliance report templates
+Backup report templatesCompliance report templatesScanning report templates
@@ -226,0 +227,31 @@ Compliance report template | Sample report in JSON format
+## Scanning report templates
+
+**Scanning report templates**. These templates give you daily updates on your scanning jobs with expanded context including vault properties, and backup plan details. You can use these reports to monitor your scan job statuses, reports, and identify any failures that might need further action. The following table lists a scanning report template name and its sample output.
+
+Scanning report template | Sample report in JSON format  
+---|---  
+`MALWARE_JOB_REPORT` | 
+    
+    
+    {  
+      "reportTimePeriodStart": "2025-11-09T00:00:00Z",   
+      "reportTimePeriodEnd": "2025-11-10T00:00:00Z",   
+      "accountId": "025066259999",   
+      "region": "us-east-1",   
+      "scanJobId": "489abba3-0a57-4207-93ff-d3947d85a8d3",   
+      "scanId": "9ddd3144f68ea3ee6e388c66a0b55467",   
+      "malwareScanner": "GUARDDUTY",   
+      "jobStatus": "RUNNING",   
+      "scanResultStatus":"",  
+      "statusMessage": "",  
+      "resourceType": "EBS",   
+      "resourceArn": "arn:aws:ec2:us-east-1:025066259999:volume/vol-0f1c480a6a9b33cb7",   
+      "backupPlanArn": "arn:aws:backup:us-east-1:025066259999:backup-plan:orgs/4232272a-ed54-3a88-b1d0-ace894b6c24c",   
+      "creationDate": "2025-10-28T17:30:50.820Z",   
+      "recoveryPointArn": "arn:aws:ec2:us-east-1::snapshot/snap-03fef858bad24c7a6",   
+      "backupVaultName": "Default",   
+      "backupVaultArn": "arn:aws:backup:us-east-1:025066259999:backup-vault:Default",   
+      "iamRoleArn": "arn:aws:iam::025066259999:role/service-role/AWSBackupDefaultServiceRole",   
+      "scannerRoleArn": "arn:aws:iam::025066259999:role/AWSBackupGuardDutyRolePolicyForScans"   
+    }  
+