AWS aws-backup medium security documentation change

Service: aws-backup · 2026-02-13 · Security-related medium

File: aws-backup/latest/devguide/encryption.md

Summary

Updated example IAM policy to use root ARN (arn:aws:iam::123456789012:root) instead of user/root ARN in encryption key policies.

Security assessment

Corrects potentially insecure example policy by using proper root ARN format. The original user/root format might not function correctly, leading to misconfigured encryption access controls.

Diff

diff --git a/aws-backup/latest/devguide/encryption.md b/aws-backup/latest/devguide/encryption.md
index 370363d50..3d3d4da10 100644
--- a//aws-backup/latest/devguide/encryption.md
+++ b//aws-backup/latest/devguide/encryption.md
@@ -100 +100 @@ JSON
-                  "AWS": "arn:aws:iam::123456789012:user/root"
+                  "AWS": "arn:aws:iam::123456789012:root"
@@ -114 +114 @@ JSON
-                  "AWS": "arn:aws:iam::123456789012:user/root"
+                  "AWS": "arn:aws:iam::123456789012:root"