Document history for Amazon Backup

Amazon Backup Audit Manager now offers the control Resources in a logically air-gapped vault to assist with monitoring that resources have been copied to a logically air-gapped vault within the time frame specified.

For more information, see Controls and remediation and Audit restore testing.

Amazon Backup customers can now create cross-Region copies of Amazon Neptune backups in more Regions, including Asia Pacific (Hong Kong), Israel (Tel Aviv), Middle East (Bahrain), and Middle East (UAE).

For more information, see feature availability by Region and creating backup copies across Amazon Web Services Regions.

Users who have backed up SAP HANA databases on Amazon EC2 instances can now copy snapshots from full backups to other Regions and other accounts.

For more information, see SAP HANA databases on Amazon EC2 instances.

Amazon Backup has introduced a secondary type of vault for storing copies of backups. Logically air-gapped vaults offer enhanced security features as well as the ability to share vault access with accounts through Amazon RAM.

For more information, see Logically air-gapped vault.

August 7, 2024

Amazon Backup support for Amazon Simple Storage Service (Amazon S3) is now available in Canada West (Calgary).

Customers can now backup and restore resources within the Canada West (Calgary) Region. For more information on Amazon Backup Amazon S3 Region availability, see Supported Services by Amazon Web Services Region.

Logically air-gapped vault preview has ended.

Amazon Backup support of Amazon EBS snapshot archive tier is now available in the following Regions:

Amazon Backup added permission backup:TagResource to the following managed policies:

For more information, see Policy updates.

May 17, 2024

Backup and restore for many resource types are now available in Amazon Web Services Region Canada West (Calgary).

For compatible backup features, see Feature availability by Amazon Web Services Region.

For supported resource types, see Supported services by Amazon Web Services Region.

Amazon Backup updated the policy AWSServiceRolePolicyForBackupRestoreTesting by adding permissions to support additional resource types within the restore testing feature.

For more information on the specific permissions added, see Policy updates.

Amazon Backup now supports backup and restore of FSx for ONTAP FlexGroup volumes in most Amazon Web Services Regions.

For more information, see Restoring an Amazon FSx file system

Amazon Backup now offers support SAP HANA High Availability databases on Amazon EC2 backup and restore.

For more information, see SAP HANA on Amazon EC2 backups and Restoring an SAP HANA High Availability system

Amazon Backup Audit Manager now offers the control Restore time for resources meet target to assist with monitoring restore times. This control checks if the restore time of a resource meets the target duration.

For more information, see Controls and remediation and Audit restore testing.

Amazon Backup introduces restore testing, which brings automated and periodic evaluation of restore viability, as well as the ability to monitor restore job duration times.

For more information, see Restore testing.

Amazon Backup added the permissions ec2:DescribeSnapshotTierStatus and ec2:ModifySnapshotTier to the managed policies AWSBackupServiceRolePolicyForBackups and AWSBackupServiceLinkedRolePolicyForBackup. Amazon Backup also added the permissions ec2:DescribeSnapshotTierStatus and ec2:RestoreSnapshotTier to managed policy AWSBackupServiceRolePolicyForRestores.

These permissions are necessary for users to have the option to transition Amazon EBS resources stored with Amazon Backup to archive storage and to restore resources from the archive storage tier.

For more information, see Policy updates.

November 27, 2023

Amazon Backup added restore-testing.backup.amazonaws.com to IamPassRolePermissions and IamCreateServiceLinkedRolePermissions. This addition is necessary for Amazon Backup to conduct restore tests on behalf of customers.

Amazon Backup has added the new service-linked role named AWSServiceRoleForBackupRestoreTesting, which provides backup permissions to conduct restore testing.

This new service-linked role provides Amazon Backup with permissions necessary to conduct restore testing. The permissions include the actions list, read, and write for the following services to be included in restore tests: Aurora, DocumentDB, DynamoDB, Amazon EBS, Amazon EC2, Amazon EFS, FSx for Lustre, FSx for Windows File Server, FSx for ONTAP, FSx for OpenZFS, Amazon Neptune, Amazon RDS, and Amazon S3.

November 27, 2023

The Amazon Backup console now displays a jobs dashboard, simplifying backup health monitoring at scale with a new visual user interface and aggregated backup, copy, and restore metrics for services supported by Amazon Backup.

The jobs dashboard is available in all Regions where Amazon Backup Audit Manager is available.

Regions not listed will still be able to access the CloudWatch dashboard.

For more information, see Amazon Backup console dashboards.

Amazon Backup has expanded its support for backups of Amazon CloudFormation resources. Your CloudFormation application stacks that have nested stacks within them can be included in your backups.

For more information, see CloudFormation stack backups.

Amazon Backup support for Amazon S3 is now available in China (Beijing) and China (Ningxia) Regions.

For more information, see Feature availability by Region.

Amazon Backup now supports continuous backups and point-in-time restore (PITR) for Aurora resources.

For more information, see Continuous backups and Point-in-time recovery.

Amazon Backup now supports the option to exclude chosen resources from your Amazon CloudFormation stack.

For more information, see Amazon CloudFormation stack backups.

Amazon Backup plan rules can now have a specified timezone for backup windows.

For more information, see Managing backup plans.

Many Amazon Backup features are now available in the new Israel (Tel Aviv) Region.

To see what resources are supported, visit Feature availability by Amazon Web Services Region.

August 22, 2023

Amazon Backup Audit Manager report generation can now be accessed by delegated administrator accounts. For more information, see

Amazon Backup has increased performance, size, and speed capabilities for S3 bucket backups.

For more information, see Amazon S3 backups.

Tags that are part of a backup can now be copied when you create a restore job in China (Beijing) or China (Ningxia) Regions.

For more information, see Copy tags during a restore.

Amazon Backup support for Amazon S3 is now available in Europe (Spain), Europe (Zurich), Asia Pacific (Hyderabad), and Asia Pacific (Melbourne) Regions.

For more information, see Feature availability by Region.

Amazon Backup now supports cross-account backup copy of most resources in the following Regions: Asia Pacific (Jakarta), Middle East (Bahrain), Asia Pacific (Hong Kong), Africa (Cape Town), Europe (Milan), Asia Pacific (Osaka), Middle East (UAE) , Europe (Spain), Europe (Zurich), Asia Pacific (Hyderabad), and Asia Pacific (Melbourne).

For more information, see Feature availability by Region

Amazon Backup has expanded Amazon Backup Audit Manager into Amazon GovCloud (US-East) and Amazon GovCloud (US-West).

For more information, see Feature availability by Region

Amazon Backup now supports cross-account management of resources in Amazon GovCloud (US-East) and Amazon GovCloud (US-West).

For more information, see Managing Amazon Backup resources across multiple Amazon accounts.

Tags that are part of a backup can now be copied when you create a restore job.

For more information, see Copy tags during a restore.

You can now choose to receive notifications related to backup, copy, and restore events through the Amazon User Notifications console.

For more information, see Getting started with Amazon User Notifications.

Amazon Backup support for Amazon S3 (Amazon Simple Storage Service) is now available in South America (São Paulo) Region.

For more information, see Amazon S3 backups.

Amazon Backup is now available in Asia Pacific (Melbourne) Region.

For more information, see Feature availability by Amazon Region.

Amazon Backup support for Amazon S3 (Amazon Simple Storage Service) is now available in Amazon GovCloud (US-East) and Amazon GovCloud (US-West) Regions

For more information, see Amazon S3 backups.

Amazon Backup now offers the ability to backup and restore SAP HANA databases running on Amazon EC2 instances in most Regions.

For more information, see SAP HANA databases on Amazon EC2 instances backup.

Amazon Backup support has expanded to new Regions, including Europe (Spain), Europe (Zurich), and Asia Pacific (Hyderabad). Supported resources can be backed up and restored within these Regions.

For more information, see Feature availability by Amazon Region.

Updated Amazon managed policy AWSBackupAuditAccess. Amazon Backup replaced the resource selection within the API config:DescribeComplianceByConfigRule with a wildcard resource.

For more information see Policy updates for Amazon Backup.

Amazon Backup support for Amazon S3 is now available in Asia Pacific (Jakarta) and Middle East (UAE) Regions.

VMware VM (virtual machine) backups that experience CBT (Changed Block Tracking) data issues now contain additional information to help remedy and troubleshoot.

For more information, see Incremental VM backups and Troubleshoot your virtual machines.

Amazon Backup gateway now supports configuring multiple network adapters

For more information on configuring your network adapters, see Configure your gateway for multiple NICs in VMware in the Amazon Backup Developer Guide.

Amazon Backup now supports backup and restore of virtual machines which run on VMware vSphere 8.

For more information on supported VMware options, see Supported VMs in the Amazon Backup Developer Guide.

Backup Audit Manager now offers support for Amazon Relational Database Service Multi-Availability Zone backups.

For more information, see how to audit backups and create reports with Amazon Backup Audit Manager.

Amazon Backup now offers expanded backup capabilities for Timestream backups. Backup plans can now take incremental backups to lower the time required to backup Timestream resources and lower storage costs.

For more information, see Amazon Timestream backups.

Amazon Backup now offers cross-Region backups in Asia Pacific (Jakarta) Region, Middle East (Bahrain) Region, Asia Pacific (Hong Kong) Region, Africa (Cape Town) Region, and Europe (Milan) Region for most resources.

For more information, see Creating backup copies across Amazon Web Services Regions.

Amazon Backup Gateway now allows limits on the upload throughput from gateways to Amazon Backup to control the amount of network bandwidth used by the gateway.

To support this feature, Amazon Backup has created and updated managed policies, including AWSBackupFullAccess and AWSBackupOperatorAccess.

For more information, see Backup Gateway bandwidth throttling.

Amazon Backup Gateway now supports VMware tags. Users have the additional flexibility to create Amazon tags that match tags used for virtual machines.

To support this feature, Amazon Backup has created and updated managed policies, including AWSBackupGatewayServiceRolePolicyForVirtualMachineMetadataSync, AWSBackupFullAccess, and AWSBackupOperatorAccess.

For more information, see VMware tags.

Amazon Backup introduces a new tool to help protect recovery points through a legal hold. For more information see Legal hold.

Amazon Backup Audit Manager brings additional functionality to compliance and job reports. Users can generate reports incorporating multiple Regions and multiple accounts.

For more information, see Working with audit reports.

Amazon Backup provides the capability to backup CloudFormation and restore applications containing multiple resources by backing up a stack and restoring the resources within it.

For more information, see Application stack backups.

Amazon Backup accounts enrolled in Amazon Organizations can designate member accounts as delegated administrator accounts.

For more information, see Managing multiple accounts with Amazon Organizations.

Amazon Backup now offers the ability to restore virtual machines to Amazon EC2 instances, in addition to the ability to restore machines to EBS, VMware, VMware Cloud on Amazon, and VMware Cloud on Amazon Outposts.

For more information, see documentation on how to Use the Amazon Backup console to restore virtual machine recovery points.

Amazon Backup Vault Lock can be now created in governance mode for additional IAM protections or in compliance mode to ensure immutability.

Learn more at Amazon Backup Vault Lock.

Amazon Backup now offers cross-Region and cross-account backup copying for Amazon S3 backups.

For more information see Amazon S3 backups.

Amazon Backup Audit Manager now offers additional controls to support monitoring and auditing FSx for ONTAP volumes, including Backup resources are included in at least one backup plan and Last recovery point created.

For more information, see Amazon Backup Audit Manager controls and remediation.

Amazon Backup has added a Multi-Availability Zone cluster backup and restore option with one primary and two readable standby database instances.

To learn more, see Amazon RDS Multi-AZ backups.

Amazon Backup Audit Manager offers a new audit control for increased compliance support.

Last recovery point created is an optional additional control to ensure recovery points are created within specified time frames.

To learn more, see Last recovery point created control.

Amazon Backup Gateway provided a sample endpoint to assist users with connecting to VPNs (Virtual Private Networks). For more information, see Creating a Amazon Backup VPC endpoint.

Amazon Backup now supports Amazon VPC endpoints for VMware, enabling you to use a virtual private network between your VMware environments and Amazon using Amazon PrivateLink.

For more information, see Creating a gateway and Amazon Backup and Amazon PrivateLink.

Backup Audit Manager now offers support for the compliance control Backup resources protected by backup plan for S3 resource types.

For more information, see Amazon Backup Audit Manager controls and remediation.

Backup Audit Manager now offers support for the compliance control Backup resources protected by backup plan for Storage Gateway resource types.

For more information, see Amazon Backup Audit Manager controls and remediation.

You can now use Amazon Backup to copy Amazon FSx backups across Amazon Web Services Regions and accounts. For more information, see Creating a Backup Copy.

If you use customer managed policies, you should add the new permission fsx:CopyBackup to prevent existing backup jobs from failing. For that permission, see the last statement in the Amazon FSx backup policy in the Customer managed policies.