AWS Security ChangesHomeSearch

AWS aws-backup documentation change

Service: aws-backup · 2026-06-13 · Documentation low

File: aws-backup/latest/devguide/access-control.md

Summary

Updated all AWS Backup API reference links to use absolute URLs instead of relative paths

Security assessment

The changes only modify documentation links to use full URLs (https://docs.aws.amazon.com/...) instead of relative paths. This improves link reliability but doesn't address any security vulnerabilities, alter security controls, or introduce new security documentation. The actual security content about IAM permissions and resource-based policies remains unchanged.

Diff

diff --git a/aws-backup/latest/devguide/access-control.md b/aws-backup/latest/devguide/access-control.md
index 909f52052..aaab3ecf9 100644
--- a//aws-backup/latest/devguide/access-control.md
+++ b//aws-backup/latest/devguide/access-control.md
@@ -75 +75 @@ Resources that support full AWS Backup management all have recovery points in th
-AWS Backup provides a set of operations to work with AWS Backup resources. For a list of available operations, see AWS Backup [Actions](./API_Operations.html).
+AWS Backup provides a set of operations to work with AWS Backup resources. For a list of available operations, see AWS Backup [Operations](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_Operations.html).
@@ -92 +92 @@ The AWS account owns the resources that are created in the account, regardless o
-For each AWS Backup resource (see Resources and operations), the service defines a set of API operations (see [Actions](./API_Operations.html)). To grant permissions for these API operations, AWS Backup defines a set of actions that you can specify in a policy. Performing an API operation can require permissions for more than one action.
+For each AWS Backup resource (see Resources and operations), the service defines a set of API operations (see [Operations](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_Operations.html)). To grant permissions for these API operations, AWS Backup defines a set of actions that you can specify in a policy. Performing an API operation can require permissions for more than one action.
@@ -129,46 +129,46 @@ AWS Backup API and required permissions for actions AWS Backup API operations |
-[CreateBackupPlan](./API_CreateBackupPlan.html) | `backup:CreateBackupPlan` | `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[CreateBackupSelection](./API_CreateBackupSelection.html) | `backup:CreateBackupSelection` | `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[CreateBackupVault](./API_CreateBackupVault.html) |  `backup:CreateBackupVault` `backup-storage:MountCapsule` `kms:CreateGrant` `kms:GenerateDataKey` `kms:Decrypt` `kms:RetireGrant` `kms:DescribeKey` |  `arn:aws:backup:`region`:`account-id`:backup-vault:*` For `backup-storage`: * For `kms`: `arn:aws:kms:`region`:`account-id`:key/`keystring``  
-[DeleteBackupPlan](./API_DeleteBackupPlan.html) | `backup:DeleteBackupPlan` | `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[DeleteBackupSelection](./API_DeleteBackupSelection.html) | `backup:DeleteBackupSelection` | `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[DeleteBackupVault](./API_DeleteBackupVault.html) | `backup:DeleteBackupVault` 1 | `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[DeleteBackupVaultAccessPolicy](./API_DeleteBackupVaultAccessPolicy.html) | `backup:DeleteBackupVaultAccessPolicy` | `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[DeleteBackupVaultNotifications](./API_DeleteBackupVaultNotifications.html) |  `backup:DeleteBackupVaultNotifications` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[DeleteRecoveryPoint](./API_DeleteRecoveryPoint.html) |  `backup:DeleteRecoveryPoint` 1 | 2  
-[DescribeBackupJob](./API_DescribeBackupJob.html) | `backup:DescribeBackupJob` |   
-[DescribeBackupVault](./API_DescribeBackupVault.html) |  `backup:DescribeBackupVault` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[DescribeProtectedResource](./API_DescribeProtectedResource.html) | `backup:DescribeProtectedResource` |   
-[DescribeRecoveryPoint](./API_DescribeRecoveryPoint.html) |  `backup:DescribeRecoveryPoint` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*` 2  
-[DescribeRestoreJob](./API_DescribeRestoreJob.html) | `backup:DescribeRestoreJob` |   
-[DescribeRegionSettings](./API_DescribeRegionSettings.html) |  `backup:DescribeRegionSettings` |   
-[ExportBackupPlanTemplate](./API_ExportBackupPlanTemplate.html) | `backup:ExportBackupPlanTemplate` |   
-[GetBackupPlan](./API_GetBackupPlan.html) | `backup:GetBackupPlan` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[GetBackupPlanFromJSON](./API_GetBackupPlanFromJSON.html) | `backup:GetBackupPlanFromJSON` |   
-[GetBackupPlanFromTemplate](./API_GetBackupPlanFromTemplate.html) | `backup:GetBackupPlanFromTemplate` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[GetBackupSelection](./API_GetBackupSelection.html) | `backup:GetBackupSelection` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[GetBackupVaultAccessPolicy](./API_GetBackupVaultAccessPolicy.html) |  `backup:GetBackupVaultAccessPolicy` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[GetBackupVaultNotifications](./API_GetBackupVaultNotifications.html) |  `backup:GetBackupVaultNotifications` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[GetRecoveryPointRestoreMetadata](./API_GetRecoveryPointRestoreMetadata.html) |  `backup:GetRecoveryPointRestoreMetadata` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[GetSupportedResourceTypes](./API_GetSupportedResourceTypes.html) | `backup:GetSupportedResourceTypes` |   
-[ListBackupJobs](./API_ListBackupJobs.html) | `backup:ListBackupJobs` |   
-[ListBackupPlans](./API_ListBackupPlans.html) | `backup:ListBackupPlans` |   
-[ListBackupPlanTemplates](./API_ListBackupPlanTemplates.html) | `backup:ListBackupPlanTemplates` |   
-[ListBackupPlanVersions](./API_ListBackupPlanVersions.html) | `backup:ListBackupPlanVersions` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[ListBackupSelections](./API_ListBackupSelections.html) | `backup:ListBackupSelections` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[ListBackupVaults](./API_ListBackupVaults.html) | `backup:ListBackupVaults` |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[ListProtectedResources](./API_ListProtectedResources.html) | `backup:ListProtectedResources` |   
-[ListRecoveryPointsByBackupVault](./API_ListRecoveryPointsByBackupVault.html) |  `backup:ListRecoveryPointsByBackupVault` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[ListRecoveryPointsByResource](./API_ListRecoveryPointsByResource.html) | `backup:ListRecoveryPointsByResource` |   
-[ListRestoreJobs](./API_ListRestoreJobs.html) | `backup:ListRestoreJobs` |   
-[ListTags](./API_ListTags.html) | `backup:ListTags` |   
-[PutBackupVaultAccessPolicy](./API_PutBackupVaultAccessPolicy.html) |  `backup:PutBackupVaultAccessPolicy` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[PutBackupVaultLockConfiguration](./API_PutBackupVaultLockConfiguration.html) |  `backup:PutBackupVaultLockConfiguration` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[PutBackupVaultNotifications](./API_PutBackupVaultNotifications.html) |  `backup:PutBackupVaultNotifications` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[StartBackupJob](./API_StartBackupJob.html) | `backup:StartBackupJob` |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
-[StartRestoreJob](./API_StartRestoreJob.html) | `backup:StartRestoreJob` |  `arn:aws:backup:`region`:`account-id`:backup-vault:*` `arn:aws:backup:`region`:`account-id:`recovery-point:*` 3  
-[StopBackupJob](./API_StopBackupJob.html) | `backup:StopBackupJob` |   
-[TagResource](./API_TagResource.html) | `backup:TagResource` | `arn:aws:backup:`region`:`account-id:`recovery-point:*`  
-[UntagResource](./API_UntagResource.html) | `backup:UntagResource` |   
-[UpdateBackupPlan](./API_UpdateBackupPlan.html) | `backup:UpdateBackupPlan` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
-[UpdateRecoveryPointLifecycle](./API_UpdateRecoveryPointLifecycle.html) |  `backup:UpdateRecoveryPointLifecycle` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*` 2  
-[UpdateRegionSettings](./API_UpdateRegionSettings.html) |  `backup:UpdateRegionSettings` `backup:DescribeRegionSettings` |   
+[CreateBackupPlan](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_CreateBackupPlan.html) | `backup:CreateBackupPlan` | `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[CreateBackupSelection](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_CreateBackupSelection.html) | `backup:CreateBackupSelection` | `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[CreateBackupVault](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_CreateBackupVault.html) |  `backup:CreateBackupVault` `backup-storage:MountCapsule` `kms:CreateGrant` `kms:GenerateDataKey` `kms:Decrypt` `kms:RetireGrant` `kms:DescribeKey` |  `arn:aws:backup:`region`:`account-id`:backup-vault:*` For `backup-storage`: * For `kms`: `arn:aws:kms:`region`:`account-id`:key/`keystring``  
+[DeleteBackupPlan](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DeleteBackupPlan.html) | `backup:DeleteBackupPlan` | `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[DeleteBackupSelection](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DeleteBackupSelection.html) | `backup:DeleteBackupSelection` | `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[DeleteBackupVault](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DeleteBackupVault.html) | `backup:DeleteBackupVault` 1 | `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[DeleteBackupVaultAccessPolicy](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DeleteBackupVaultAccessPolicy.html) | `backup:DeleteBackupVaultAccessPolicy` | `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[DeleteBackupVaultNotifications](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DeleteBackupVaultNotifications.html) |  `backup:DeleteBackupVaultNotifications` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[DeleteRecoveryPoint](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DeleteRecoveryPoint.html) |  `backup:DeleteRecoveryPoint` 1 | 2  
+[DescribeBackupJob](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DescribeBackupJob.html) | `backup:DescribeBackupJob` |   
+[DescribeBackupVault](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DescribeBackupVault.html) |  `backup:DescribeBackupVault` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[DescribeProtectedResource](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DescribeProtectedResource.html) | `backup:DescribeProtectedResource` |   
+[DescribeRecoveryPoint](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DescribeRecoveryPoint.html) |  `backup:DescribeRecoveryPoint` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*` 2  
+[DescribeRestoreJob](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DescribeRestoreJob.html) | `backup:DescribeRestoreJob` |   
+[DescribeRegionSettings](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_DescribeRegionSettings.html) |  `backup:DescribeRegionSettings` |   
+[ExportBackupPlanTemplate](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ExportBackupPlanTemplate.html) | `backup:ExportBackupPlanTemplate` |   
+[GetBackupPlan](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_GetBackupPlan.html) | `backup:GetBackupPlan` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[GetBackupPlanFromJSON](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_GetBackupPlanFromJSON.html) | `backup:GetBackupPlanFromJSON` |   
+[GetBackupPlanFromTemplate](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_GetBackupPlanFromTemplate.html) | `backup:GetBackupPlanFromTemplate` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[GetBackupSelection](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_GetBackupSelection.html) | `backup:GetBackupSelection` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[GetBackupVaultAccessPolicy](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_GetBackupVaultAccessPolicy.html) |  `backup:GetBackupVaultAccessPolicy` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[GetBackupVaultNotifications](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_GetBackupVaultNotifications.html) |  `backup:GetBackupVaultNotifications` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[GetRecoveryPointRestoreMetadata](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_GetRecoveryPointRestoreMetadata.html) |  `backup:GetRecoveryPointRestoreMetadata` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[GetSupportedResourceTypes](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_GetSupportedResourceTypes.html) | `backup:GetSupportedResourceTypes` |   
+[ListBackupJobs](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListBackupJobs.html) | `backup:ListBackupJobs` |   
+[ListBackupPlans](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListBackupPlans.html) | `backup:ListBackupPlans` |   
+[ListBackupPlanTemplates](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListBackupPlanTemplates.html) | `backup:ListBackupPlanTemplates` |   
+[ListBackupPlanVersions](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListBackupPlanVersions.html) | `backup:ListBackupPlanVersions` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[ListBackupSelections](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListBackupSelections.html) | `backup:ListBackupSelections` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[ListBackupVaults](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListBackupVaults.html) | `backup:ListBackupVaults` |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[ListProtectedResources](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListProtectedResources.html) | `backup:ListProtectedResources` |   
+[ListRecoveryPointsByBackupVault](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListRecoveryPointsByBackupVault.html) |  `backup:ListRecoveryPointsByBackupVault` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[ListRecoveryPointsByResource](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListRecoveryPointsByResource.html) | `backup:ListRecoveryPointsByResource` |   
+[ListRestoreJobs](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListRestoreJobs.html) | `backup:ListRestoreJobs` |   
+[ListTags](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_ListTags.html) | `backup:ListTags` |   
+[PutBackupVaultAccessPolicy](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_PutBackupVaultAccessPolicy.html) |  `backup:PutBackupVaultAccessPolicy` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[PutBackupVaultLockConfiguration](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_PutBackupVaultLockConfiguration.html) |  `backup:PutBackupVaultLockConfiguration` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[PutBackupVaultNotifications](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_PutBackupVaultNotifications.html) |  `backup:PutBackupVaultNotifications` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[StartBackupJob](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_StartBackupJob.html) | `backup:StartBackupJob` |  `arn:aws:backup:`region`:`account-id`:backup-vault:*`  
+[StartRestoreJob](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_StartRestoreJob.html) | `backup:StartRestoreJob` |  `arn:aws:backup:`region`:`account-id`:backup-vault:*` `arn:aws:backup:`region`:`account-id:`recovery-point:*` 3  
+[StopBackupJob](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_StopBackupJob.html) | `backup:StopBackupJob` |   
+[TagResource](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_TagResource.html) | `backup:TagResource` | `arn:aws:backup:`region`:`account-id:`recovery-point:*`  
+[UntagResource](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_UntagResource.html) | `backup:UntagResource` |   
+[UpdateBackupPlan](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_UpdateBackupPlan.html) | `backup:UpdateBackupPlan` |  `arn:aws:backup:`region`:`account-id`:backup-plan:*`  
+[UpdateRecoveryPointLifecycle](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_UpdateRecoveryPointLifecycle.html) |  `backup:UpdateRecoveryPointLifecycle` 1 |  `arn:aws:backup:`region`:`account-id`:backup-vault:*` 2  
+[UpdateRegionSettings](https://docs.aws.amazon.com/aws-backup/latest/APIReference/API_UpdateRegionSettings.html) |  `backup:UpdateRegionSettings` `backup:DescribeRegionSettings` |