Backup
Prefix backup, 122 actions · Domain Storage
10 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 3 are service-linked role policies, shown with permission data only.
User access (1)
- AWSBackupFullAccessAdmin
Operator and limited (6)
- AWSBackupAccessPointOperatorAccessOperator
- AWSBackupAuditAccessOperator
- AWSBackupGuardDutyRolePolicyForScansOperator
- AWSBackupOperatorAccessOperator
- AWSBackupRestoreAccessForSAPHANAOperator
- AWSBackupSearchOperatorAccessOperator
Service-linked roles (3)
Also grants Backup actions (27)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonLaunchWizardFullAccessV2
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSBackupServiceLinkedRolePolicyForBackup
- AWSBackupServiceRolePolicyForBackup
- AWSBackupServiceRolePolicyForRestores
- AWSBackupServiceRolePolicyForS3Backup
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
associatebackupvaultmpaapprovalteam cancellegalhold copyfrombackupvault copyintobackupvault createbackupaccesspoint createbackupplan createbackupselection createbackupvault createframework createlegalhold createlogicallyairgappedbackupvault createreportplan createrestoreaccessbackupvault createrestoretestingplan createrestoretestingselection createtieringconfiguration deletebackupaccesspoint deletebackupplan deletebackupselection deletebackupvault deletebackupvaultaccesspolicy deletebackupvaultlockconfiguration deletebackupvaultnotifications deletebackupvaultsharingpolicy deleteframework deleterecoverypoint deletereportplan deleterestoretestingplan deleterestoretestingselection deletetieringconfiguration describebackupaccesspoint describebackupjob describebackupvault describecopyjob describeframework describeglobalsettings describeprotectedresource describerecoverypoint describeregionsettings describereportjob describereportplan describerestorejob describescanjob disassociatebackupvaultmpaapprovalteam disassociaterecoverypoint disassociaterecoverypointfromparent exportbackupplantemplate getbackupplan getbackupplanfromjson getbackupplanfromtemplate getbackupselection getbackupvaultaccesspolicy getbackupvaultnotifications getbackupvaultsharingpolicy getlegalhold getpitrmalwarescanresults getrecoverypointindexdetails getrecoverypointrestoremetadata getrestorejobmetadata getrestoretestinginferredmetadata getrestoretestingplan getrestoretestingselection getsupportedresourcetypes gettieringconfiguration listbackupaccesspoints listbackupaccesspointsbyrecoverypoint listbackupaccesspointsbyresource listbackupjobsummaries listbackupjobs listbackupplantemplates listbackupplanversions listbackupplans listbackupselections listbackupvaults listcopyjobsummaries listcopyjobs listframeworks listindexedrecoverypoints listindexedrecoverypointsforsearch listlegalholds listprotectedresources listprotectedresourcesbybackupvault listrecoverypointsbybackupvault listrecoverypointsbylegalhold listrecoverypointsbyresource listreportjobs listreportplans listrestoreaccessbackupvaults listrestorejobsummaries listrestorejobs listrestorejobsbyprotectedresource listrestoretestingplans listrestoretestingselections listscanjobsummaries listscanjobs listtags listtieringconfigurations putbackupvaultaccesspolicy putbackupvaultlockconfiguration putbackupvaultnotifications putbackupvaultsharingpolicy putrestorevalidationresult revokerestoreaccessbackupvault searchrecoverypoint startbackupjob startcopyjob startreportjob startrestorejob startscanjob stopbackupjob tagresource untagresource updatebackupplan updateframework updateglobalsettings updaterecoverypointindexsettings updaterecoverypointlifecycle updateregionsettings updatereportplan updaterestoretestingplan updaterestoretestingselection updatetieringconfiguration
Actions (122)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| backup:AssociateBackupVaultMpaApprovalTeam | Write | 5 | 1 |
| backup:CancelLegalHold | Write | 5 | 1 |
| backup:CopyFromBackupVault | Write | 6 | 1 |
| backup:CopyIntoBackupVault | Write | 5 | 2 |
| backup:CreateBackupAccessPoint | Write | 5 | 3 |
| backup:CreateBackupPlan | Write | 5 | 2 |
| backup:CreateBackupSelection | Write | 6 | 2 |
| backup:CreateBackupVault | Write | 5 | 2 |
| backup:CreateFramework | Write | 6 | 1 |
| backup:CreateLegalHold | Write | 5 | 1 |
| backup:CreateLogicallyAirGappedBackupVault | Write | 5 | 1 |
| backup:CreateReportPlan | Write | 6 | 1 |
| backup:CreateRestoreAccessBackupVault | Write | 5 | 1 |
| backup:CreateRestoreTestingPlan | Write | 5 | 1 |
| backup:CreateRestoreTestingSelection | Write | 5 | 1 |
| backup:CreateTieringConfiguration | Write | 5 | 1 |
| backup:DeleteBackupAccessPoint | Write | 6 | 2 |
| backup:DeleteBackupPlan | Write | 5 | 1 |
| backup:DeleteBackupSelection | Write | 6 | 1 |
| backup:DeleteBackupVault | Write | 5 | 1 |
| backup:DeleteBackupVaultAccessPolicy | Permissions management | 5 | 1 |
| backup:DeleteBackupVaultLockConfiguration | Write | 5 | 1 |
| backup:DeleteBackupVaultNotifications | Write | 5 | 1 |
| backup:DeleteBackupVaultSharingPolicy | Permissions management | 5 | 1 |
| backup:DeleteFramework | Write | 6 | 1 |
| backup:DeleteRecoveryPoint | Write | 5 | 1 |
| backup:DeleteReportPlan | Write | 6 | 1 |
| backup:DeleteRestoreTestingPlan | Write | 5 | 1 |
| backup:DeleteRestoreTestingSelection | Write | 5 | 1 |
| backup:DeleteTieringConfiguration | Write | 5 | 1 |
| backup:DescribeBackupAccessPoint | Read | 14 | 2 |
| backup:DescribeBackupJob | Read | 15 | 1 |
| backup:DescribeBackupVault | Read | 20 | 4 |
| backup:DescribeCopyJob | Read | 15 | 1 |
| backup:DescribeFramework | Read | 20 | 2 |
| backup:DescribeGlobalSettings | Read | 16 | 1 |
| backup:DescribeProtectedResource | Read | 19 | 1 |
| backup:DescribeRecoveryPoint | Read | 19 | 2 |
| backup:DescribeRegionSettings | Read | 16 | 1 |
| backup:DescribeReportJob | Read | 16 | 1 |
| backup:DescribeReportPlan | Read | 19 | 3 |
| backup:DescribeRestoreJob | Read | 17 | 1 |
| backup:DescribeScanJob | Read | 13 | 1 |
| backup:DisassociateBackupVaultMpaApprovalTeam | Write | 5 | 1 |
| backup:DisassociateRecoveryPoint | Write | 5 | 1 |
| backup:DisassociateRecoveryPointFromParent | Write | 5 | 1 |
| backup:ExportBackupPlanTemplate | Read | 5 | 1 |
| backup:GetBackupPlan | Read | 20 | 3 |
| backup:GetBackupPlanFromJSON | Read | 13 | 1 |
| backup:GetBackupPlanFromTemplate | Read | 13 | 1 |
| backup:GetBackupSelection | Read | 20 | 3 |
| backup:GetBackupVaultAccessPolicy | Read | 18 | 3 |
| backup:GetBackupVaultNotifications | Read | 18 | 3 |
| backup:GetBackupVaultSharingPolicy | Read | 9 | 1 |
| backup:GetLegalHold | Read | 12 | 1 |
| backup:GetPITRMalwareScanResults | Read | 10 | 1 |
| backup:GetRecoveryPointIndexDetails | Read | 10 | 1 |
| backup:GetRecoveryPointRestoreMetadata | Read | 12 | 1 |
| backup:GetRestoreJobMetadata | Read | 11 | 1 |
| backup:GetRestoreTestingInferredMetadata | Read | 11 | 1 |
| backup:GetRestoreTestingPlan | Read | 17 | 3 |
| backup:GetRestoreTestingSelection | Read | 17 | 3 |
| backup:GetSupportedResourceTypes | Read | 12 | 1 |
| backup:GetTieringConfiguration | Read | 13 | 2 |
| backup:ListBackupAccessPoints | List | 14 | 1 |
| backup:ListBackupAccessPointsByRecoveryPoint | List | 14 | 1 |
| backup:ListBackupAccessPointsByResource | List | 14 | 1 |
| backup:ListBackupJobSummaries | List | 13 | 1 |
| backup:ListBackupJobs | List | 16 | 1 |
| backup:ListBackupPlanTemplates | List | 15 | 1 |
| backup:ListBackupPlanVersions | List | 15 | 1 |
| backup:ListBackupPlans | List | 23 | 3 |
| backup:ListBackupSelections | List | 20 | 3 |
| backup:ListBackupVaults | List | 21 | 3 |
| backup:ListCopyJobSummaries | List | 13 | 1 |
| backup:ListCopyJobs | List | 16 | 1 |
| backup:ListFrameworks | List | 19 | 2 |
| backup:ListIndexedRecoveryPoints | List | 13 | 1 |
| backup:ListIndexedRecoveryPointsForSearch | Permissions management | 13 | 1 |
| backup:ListLegalHolds | List | 16 | 1 |
| backup:ListProtectedResources | List | 17 | 1 |
| backup:ListProtectedResourcesByBackupVault | List | 15 | 1 |
| backup:ListRecoveryPointsByBackupVault | List | 20 | 1 |
| backup:ListRecoveryPointsByLegalHold | List | 15 | 1 |
| backup:ListRecoveryPointsByResource | List | 17 | 1 |
| backup:ListReportJobs | List | 16 | 1 |
| backup:ListReportPlans | List | 19 | 3 |
| backup:ListRestoreAccessBackupVaults | List | 13 | 1 |
| backup:ListRestoreJobSummaries | List | 13 | 1 |
| backup:ListRestoreJobs | List | 17 | 1 |
| backup:ListRestoreJobsByProtectedResource | List | 14 | 1 |
| backup:ListRestoreTestingPlans | List | 17 | 3 |
| backup:ListRestoreTestingSelections | List | 17 | 3 |
| backup:ListScanJobSummaries | List | 13 | 1 |
| backup:ListScanJobs | List | 13 | 1 |
| backup:ListTags | Read | 20 | 3 |
| backup:ListTieringConfigurations | List | 16 | 2 |
| backup:PutBackupVaultAccessPolicy | Permissions management | 5 | 2 |
| backup:PutBackupVaultLockConfiguration | Write | 5 | 1 |
| backup:PutBackupVaultNotifications | Write | 5 | 1 |
| backup:PutBackupVaultSharingPolicy | Permissions management | 5 | 1 |
| backup:PutRestoreValidationResult | Write | 5 | 1 |
| backup:RevokeRestoreAccessBackupVault | Write | 5 | 1 |
| backup:SearchRecoveryPoint | Permissions management | 5 | 2 |
| backup:StartBackupJob | Write | 7 | 1 |
| backup:StartCopyJob | Write | 6 | 1 |
| backup:StartReportJob | Write | 6 | 1 |
| backup:StartRestoreJob | Write | 9 | 1 |
| backup:StartScanJob | Write | 6 | 1 |
| backup:StopBackupJob | Write | 5 | 1 |
| backup:TagResource | Tagging | 6 | 4 |
| backup:UntagResource | Tagging | 6 | 1 |
| backup:UpdateBackupPlan | Write | 5 | 1 |
| backup:UpdateFramework | Write | 6 | 1 |
| backup:UpdateGlobalSettings | Write | 5 | 1 |
| backup:UpdateRecoveryPointIndexSettings | Write | 5 | 1 |
| backup:UpdateRecoveryPointLifecycle | Write | 5 | 1 |
| backup:UpdateRegionSettings | Write | 5 | 1 |
| backup:UpdateReportPlan | Write | 6 | 1 |
| backup:UpdateRestoreTestingPlan | Write | 5 | 1 |
| backup:UpdateRestoreTestingSelection | Write | 5 | 1 |
| backup:UpdateTieringConfiguration | Write | 5 | 1 |