AWS aws-backup documentation change
Summary
Restructured DocumentDB restore steps: Added engine version selection, removed network/security step, renumbered subsequent steps, and added note about instance configuration limitations.
Security assessment
Changes are procedural updates to the restore workflow. No security vulnerabilities or weaknesses are mentioned. Encryption step remains unchanged (still allows CMK usage), and no new security features are documented.
Diff
diff --git a/aws-backup/latest/devguide/restoring-docdb.md b/aws-backup/latest/devguide/restoring-docdb.md index 9f70dee6f..fdc265099 100644 --- a//aws-backup/latest/devguide/restoring-docdb.md +++ b//aws-backup/latest/devguide/restoring-docdb.md @@ -23 +23,7 @@ Restoring a Amazon DocumentDB cluster requires that you specify multiple restore - 5. In the **Instance specifications** pane, select a DB engine for the instance. + 5. For **Restore options** , you can configure the following: + + * **Engine version** \- Select the DocumentDB engine version for the restored cluster. + +###### Note + +Instance class and number of instances cannot be configured during the restore process. The restored DocumentDB cluster will use the default instance configuration. You can modify the instance class and add or remove instances after the restore completes by using the Amazon DocumentDB console or API. @@ -29,3 +35 @@ You can use letters, numbers, and hyphens, though you cannot have two consecutiv - 7. In the **Network and security** pane, select an Availability Zone, or let us choose one for you. - - 8. In the **Database options** pane, select the database port. + 7. In the **Database options** pane, select the database port. @@ -35 +39 @@ This is the TCP/IP port that the DB instance or cluster will use for application - 9. Also in the **Database options** pane, select the DB cluster parameter group. + 8. Also in the **Database options** pane, select the DB cluster parameter group. @@ -39 +43 @@ This is the parameter group associated with this instance's DB cluster. The DB c - 10. In the **Encryption** pane, select the key that will be used to encrypt this database volume. The default is `aws/rds`. You may alternatively use a customer managed key (CMK). + 9. In the **Encryption** pane, select the key that will be used to encrypt this database volume. The default is `aws/rds`. You may alternatively use a customer managed key (CMK). @@ -41 +45 @@ This is the parameter group associated with this instance's DB cluster. The DB c - 11. In the **Log exports** pane, choose the log types to publish to Amazon CloudWatch Logs. The **IAM role** is already defined. + 10. In the **Log exports** pane, choose the log types to publish to Amazon CloudWatch Logs. The **IAM role** is already defined. @@ -43 +47 @@ This is the parameter group associated with this instance's DB cluster. The DB c - 12. In the **Restore role** pane, choose either the default IAM role for the restore job or a different IAM role. + 11. In the **Restore role** pane, choose either the default IAM role for the restore job or a different IAM role. @@ -45 +49 @@ This is the parameter group associated with this instance's DB cluster. The DB c - 13. In the Protected resource tags pane, you may optionally choose to copy tags from the backup to the restored database cluster. + 12. In the Protected resource tags pane, you may optionally choose to copy tags from the backup to the restored database cluster. @@ -47 +51 @@ This is the parameter group associated with this instance's DB cluster. The DB c - 14. After specifying all your settings, choose **Restore backup**. + 13. After specifying all your settings, choose **Restore backup**. @@ -51 +55 @@ The **Restore jobs** pane appears. A message at the top of the page provides inf - 15. After your restore finishes, attach your restored Amazon DocumentDB cluster to an Amazon RDS instance. + 14. After your restore finishes, attach your restored Amazon DocumentDB cluster to an Amazon RDS instance.