AWS aws-backup documentation change
Summary
Added a note about requiring the backup:TagResource IAM permission for resources with full AWS Backup management and continuous backups when source resources have tags or additional tags are needed on recovery points.
Security assessment
The change adds troubleshooting guidance about IAM permissions required for tagging recovery points. While IAM permissions are security-related, this is a routine documentation update to clarify permission requirements, not an indication of a security issue.
Diff
diff --git a/aws-backup/latest/devguide/troubleshooting.md b/aws-backup/latest/devguide/troubleshooting.md index a6c34b136..66338bd54 100644 --- a//aws-backup/latest/devguide/troubleshooting.md +++ b//aws-backup/latest/devguide/troubleshooting.md @@ -65,0 +66,2 @@ The following information can help you troubleshoot problems with creating backu + * For resources that support [full AWS Backup management](https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-feature-availability.html#features-by-resource) with recovery points in the format `arn:aws:backup:`region`:`account-id`:recovery-point:*` and all continuous backups, ensure your IAM role has permission to perform `backup:TagResource` if your source resources contain tags or you want to add additional tags to your recovery points. Apply the `backup:TagResource` permission to `"Resource": "arn:aws:backup:*:*:recovery-point:*"`. +