AWS aws-backup documentation change
Summary
Clarified that management account resource opt-in settings override member accounts for specific backup plans
Security assessment
This is a clarification of backup plan management hierarchy within AWS Organizations. There is no evidence of addressing a security vulnerability or documenting security controls.
Diff
diff --git a/aws-backup/latest/devguide/manage-cross-account.md b/aws-backup/latest/devguide/manage-cross-account.md index 19dc7e104..54755bc4d 100644 --- a//aws-backup/latest/devguide/manage-cross-account.md +++ b//aws-backup/latest/devguide/manage-cross-account.md @@ -35 +35 @@ Cross-account management consists of cross-account monitoring, cross-account bac -For backup plans that are managed by Organizations, the resource opt-in settings in the management account override the settings in a member account, even if one or more delegated administrator accounts are configured. Delegated administrator accounts are member accounts with enhanced features and cannot override settings like a management account can. +For backup plans that are managed by Organizations, the resource opt-in settings in the management account override the settings in a member account for that particular backup plan, even if one or more delegated administrator accounts are configured. Delegated administrator accounts are member accounts with enhanced features and cannot override settings like a management account can.