AWS Backup (backup)

2022-12-03

6 new actions, 1 new resource, 1 new condition | 3 updated actions

Additions

    Actions
  • CancelLegalHold
    • Description:  Grants permission to cancel a legal hold
    • Access:  Write
    • Resources: 

      Name: legalHold

      Required: Yes

  • CreateLegalHold
    • Description:  Grants permission to create a new legal hold
    • Access:  Write
    • Resources: 

      Name: legalHold

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys
  • DisassociateRecoveryPointFromParent
    • Description:  Grants permission to disassociate a recovery point from its parent
    • Access:  Write
    • Resources: 

      Name: recoveryPoint

      Required: Yes

  • GetLegalHold
    • Description:  Grants permission to get a legal hold
    • Access:  Read
    • Resources: 

      Name: legalHold

      Required: Yes

  • ListLegalHolds
    • Description:  Grants permission to list legal holds
    • Access:  List
  • ListRecoveryPointsByLegalHold
    • Description:  Grants permission to list recovery points by legal hold
    • Access:  List
    • Resources: 

      Name: legalHold

      Required: Yes

    Resources
  • legalHold
    • Arn:  arn:${Partition}:backup:${Region}:${Account}:legal-hold:${LegalHoldId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
    Conditions
  • backup:ChangeableForDays
    • Description:  Filters access by the value of the ChangeableForDays parameter
    • Type:  Numeric

Updates