AWS aws-backup medium security documentation change
Summary
Corrected service-linked role name in KMS key policy requirement for encrypted report buckets
Security assessment
Fixes incorrect role reference in encryption configuration documentation. Using wrong role could cause encryption failures or misconfigured access. Security impact: Medium - prevents potential encryption misconfiguration.
Diff
diff --git a/aws-backup/latest/devguide/create-report-plan-api.md b/aws-backup/latest/devguide/create-report-plan-api.md index b03849a5e..0b77a70f4 100644 --- a//aws-backup/latest/devguide/create-report-plan-api.md +++ b//aws-backup/latest/devguide/create-report-plan-api.md @@ -17 +17 @@ If you encrypt your bucket using a custom KMS key, the KMS key policy must meet - * The `Principal` attribute must include the Backup Audit Manager service-linked role [`AWSServiceRolePolicyForBackupReports`](https://console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/aws-service-role/AWSServiceRolePolicyForBackupReports) ARN. + * The `Principal` attribute must include the Backup Audit Manager service-linked role [`AWSServiceRoleForBackupReports`](https://console.aws.amazon.com/iam/home#/roles/AWSServiceRoleForBackupReports) ARN.