AWS Security ChangesHomeSearch

AWS aws-backup documentation change

Service: aws-backup · 2026-01-07 · Documentation medium

File: aws-backup/latest/devguide/logicallyairgappedvault.md

Summary

Added note that unencrypted Amazon Aurora, DocumentDB, and Neptune clusters are unsupported in logically air-gapped vaults due to encryption limitations.

Security assessment

The change documents a security-related limitation (encryption requirements) but shows no evidence of patching a vulnerability. It strengthens security guidance by explicitly warning about unsupported unencrypted configurations.

Diff

diff --git a/aws-backup/latest/devguide/logicallyairgappedvault.md b/aws-backup/latest/devguide/logicallyairgappedvault.md
index 1bbb9f087..be5e9085a 100644
--- a//aws-backup/latest/devguide/logicallyairgappedvault.md
+++ b//aws-backup/latest/devguide/logicallyairgappedvault.md
@@ -70,0 +71,2 @@ A logically air-gapped vault is a secondary vault that serves as part of a data
+  * Unencrypted Amazon Aurora, Amazon DocumentDB, and Amazon Neptune clusters are not supported for logically air-gapped vault, as they do not support encryption of unencrypted DB cluster snapshots.
+