AWS Backup (backup)

Additions

Actions

• CreateLogicallyAirGappedBackupVault
  
  • Description:  This request grants permission to create a new logically air-gapped backup vault, a logical container where backups are stored
  • Access:  Write
  • Resources: 

    Name: backupVault

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

    backup:MinRetentionDays

    backup:MaxRetentionDays

• DeleteBackupVaultSharingPolicy
  
  • Description:  Grants permission to delete backup vault sharing policy
  • Access:  Permissions management
  • Resources: 

    Name: backupVault

    Required: Yes

• GetBackupVaultSharingPolicy
  
  • Description:  Grants permission to get backup vault sharing policy
  • Access:  Read
  • Resources: 

    Name: backupVault

    Required: Yes

• ListProtectedResourcesByBackupVault
  
  • Description:  Grants permission to list protected resources inside a backup vault
  • Access:  List
  • Resources: 

    Name: backupVault

    Required: Yes

• PutBackupVaultSharingPolicy
  
  • Description:  Grants permission to add a sharing policy to the backup vault
  • Access:  Permissions management
  • Resources: 

    Name: backupVault

    Required: Yes

Conditions

• backup:MaxRetentionDays
  
  • Description:  Filters access by the value of the MaxRetentionDays parameter
  • Type:  Numeric
• backup:MinRetentionDays
  
  • Description:  Filters access by the value of the MinRetentionDays parameter
  • Type:  Numeric

Updates

Actions

• PutBackupVaultLockConfiguration
  
  Conditions
  
  • ＋ backup:MinRetentionDays
  • ＋ backup:MaxRetentionDays