AWS Security ChangesHomeSearch

AWS aws-backup documentation change

Service: aws-backup · 2025-11-22 · Documentation low

File: aws-backup/latest/devguide/restoring-fsx.md

Summary

Added documentation about Intelligent Tiering storage class requirements during FSx restore operations, including deployment type consistency, storage capacity rules, throughput limitations, and security group requirements for EFA enablement.

Security assessment

The changes include a security-related note about configuring security groups to allow traffic when enabling EFA (Elastic Fabric Adapter). However, this is a standard security configuration guidance rather than addressing a specific vulnerability. No evidence of patching a security issue is present.

Diff

diff --git a/aws-backup/latest/devguide/restoring-fsx.md b/aws-backup/latest/devguide/restoring-fsx.md
index 77352f739..41d8083b7 100644
--- a//aws-backup/latest/devguide/restoring-fsx.md
+++ b//aws-backup/latest/devguide/restoring-fsx.md
@@ -10,0 +11,2 @@ The restore options that are available when you use AWS Backup to restore Amazon
+AWS Backup supports restoring file systems that use Intelligent Tiering storage for both FSx for Lustre and FSx for OpenZFS file systems. Intelligent Tiering file systems have specific configuration requirements during restore operations.
+
@@ -72,0 +75,4 @@ AWS Backup supports Amazon FSx for Lustre file systems that have persistent stor
+###### Note
+
+You can only restore your backup to a file system of the same deployment type, storage class, throughput capacity, storage capacity, data compression type, and AWS Region as the original. You can increase your restored file system's storage capacity after it becomes available.
+
@@ -85,3 +91 @@ AWS Backup supports Amazon FSx for Lustre file systems that have persistent stor
-  6. (Optional) Enter a name for your file system.
-
-  7. Choose a **Deployment type**. AWS Backup only supports the persistent deployment type. You can't change the deployment type of a file system during restore.
+  6. Choose a **Deployment type**. AWS Backup only supports the persistent deployment type. You can't change the deployment type of a file system during restore.
@@ -91 +95,3 @@ Persistent deployment type is for long-term storage. For detailed information ab
-  8. Choose the **Throughput per unit storage** that you want to use.
+  7. Choose the **Throughput per unit storage** that you want to use.
+
+###### Note
@@ -93 +99 @@ Persistent deployment type is for long-term storage. For detailed information ab
-  9. Specify the **Storage capacity** to use. Enter a capacity between 32 GiB and 64,436 GiB.
+Throughput per unit storage cannot be configured for file systems using Intelligent-Tiering storage class.
@@ -95 +101 @@ Persistent deployment type is for long-term storage. For detailed information ab
-  10. In the **Network and security** section, provide the required information.
+  8. (Optional) For file systems using Intelligent-Tiering storage class, choose the SSD read cache sizing mode and capacity. For more information, see the FSx documentation for [ managing provisioned SSD read cache](https://docs.aws.amazon.com/fsx/latest/LustreGuide/managing-ssd-read-cache.html). 
@@ -97 +103,4 @@ Persistent deployment type is for long-term storage. For detailed information ab
-  11. (Optional) In the **Backup and maintenance** section, provide the information to set your backup preferences.
+  9. (Optional) For file systems using Intelligent-Tiering storage class, choose whether to enable EFA (Elastic Fabric Adapter). To enable EFA, make sure that your security group allows all inbound and outbound traffic within the security group.
+  10. Specify the **Storage capacity** to use. Enter a capacity between 32 GiB and 64,436 GiB.
+
+###### Note
@@ -99 +108 @@ Persistent deployment type is for long-term storage. For detailed information ab
-  12. In the **Restore role** section, choose the IAM role that AWS Backup will use to create and manage your backups on your behalf. We recommend that you choose the **Default role**. If there is no default role, one is created for you with the correct permissions. You can also provide your IAM role.
+For Intelligent Tiering file systems, storage capacity is elastic and cannot be specified during restore. The capacity will automatically scale based on your data usage.
@@ -101 +110,7 @@ Persistent deployment type is for long-term storage. For detailed information ab
-  13. Verify all your entries, and choose **Restore Backup**.
+  11. In the **Network and security** section, provide the required information.
+
+  12. (Optional) In the **Backup and maintenance** section, provide the information to set your backup preferences.
+
+  13. In the **Restore role** section, choose the IAM role that AWS Backup will use to create and manage your backups on your behalf. We recommend that you choose the **Default role**. If there is no default role, one is created for you with the correct permissions. You can also provide your IAM role.
+
+  14. Verify all your entries, and choose **Restore Backup**.
@@ -138,0 +154,4 @@ The first section, **File system details** , displays the recovery point ID, the
+###### Note
+
+Restoring from a backup with a given storage class to a file system with a different storage class is not supported.
+
@@ -157 +176,5 @@ If you choose Standard restore, specify the additional following configurations:
-    2. **Throughput capacity** : You can choose the **Recommended throughput capacity** of 64 MB/sec or you can choose to **Specify throughput capacity**.
+###### Note
+
+SSD IOPS cannot be set for file systems using Intelling-Tiering storage class
+
+    2. **Throughput capacity** : You can choose the **Recommended throughput capacity** of 64 MB/sec (for SSD storage class), and 160 MB/sec (for Intelligent-Tiering storage class), or you can choose to **Specify throughput capacity**.
@@ -167 +190,5 @@ If you choose Standard restore, specify the additional following configurations:
-  6. (_Optional_) You may enter a name for your volume.
+  6. The **SSD Storage capacity** will display the file system’s storage capacity.
+
+###### Note
+
+For Intelligent Tiering file systems, storage capacity is elastic and cannot be specified during restore. The capacity will automatically scale based on your data usage.
@@ -169 +196 @@ If you choose Standard restore, specify the additional following configurations:
-  7. The **SSD Storage capacity** will display the file system’s storage capacity.
+  7. (Optional) For file systems using Intelligent-Tiering storage class, choose the SSD read cache sizing mode and capacity. For more information, see the FSx documentation for [ managing provisioned SSD read cache](https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/managing-ssd-read-cache.html).