Service: AWS Backup
Short Name:
backup
ARN Format:
arn:aws:backup:${Region}:${Account}:${ResourceType}:${ResourceName}
ARN Regex:
^arn:aws:backup:.+:.+:.+
ReadOnlyAccess
…
AWSConfigRoleAction | Access | Reference | Description |
---|---|---|---|
backup:ListBackupJobs | Docs | Grants permission to list backup jobs | |
backup:ListBackupJobSummaries | Docs | Grants permission to list backup job summaries | |
backup:ListBackupPlans | Docs | Grants permission to list backup plans | |
backup:ListBackupPlanTemplates | Docs | Grants permission to list backup plan templates provided by AWS Backup | |
backup:ListBackupPlanVersions | Docs | Grants permission to list backup plan versions | |
backup:ListBackupSelections | Docs | Grants permission to list resource assignments for a specific backup plan | |
backup:ListBackupVaults | Docs | Grants permission to list backup vaults | |
backup:ListCopyJobs | Docs | Grants permission to list copy jobs | |
backup:ListCopyJobSummaries | Docs | Grants permission to list copy job summaries | |
backup:ListFrameworks | Docs | Grants permission to list frameworks | |
backup:ListLegalHolds | Docs | Grants permission to list legal holds | |
backup:ListProtectedResources | Docs | Grants permission to list protected resources by AWS Backup | |
backup:ListProtectedResourcesByBackupVault | Docs | Grants permission to list protected resources inside a backup vault | |
backup:ListRecoveryPointsByBackupVault | Docs | Grants permission to list recovery points inside a backup vault | |
backup:ListRecoveryPointsByLegalHold | Docs | Grants permission to list recovery points by legal hold | |
backup:ListRecoveryPointsByResource | Docs | Grants permission to list recovery points for a resource | |
backup:ListReportJobs | Docs | Grants permission to list report jobs | |
backup:ListReportPlans | Docs | Grants permission to list report plans | |
backup:ListRestoreJobs | Docs | Grants permission to list restore jobs | |
backup:ListRestoreJobsByProtectedResource | Docs | Grants permission to list restore jobs for a protected resource | |
backup:ListRestoreJobSummaries | Docs | Grants permission to list restore job summaries | |
backup:ListRestoreTestingPlans | Docs | Grants permission to list restore testing plans | |
backup:ListRestoreTestingSelections | Docs | Grants permission to list resource assignments for a specific restore testing plan | |
backup:DeleteBackupVaultAccessPolicy | Docs | Grants permission to delete backup vault access policy | |
backup:DeleteBackupVaultSharingPolicy | Docs | Grants permission to delete backup vault sharing policy | |
backup:PutBackupVaultAccessPolicy | Docs | Grants permission to add an access policy to the backup vault | |
backup:PutBackupVaultSharingPolicy | Docs | Grants permission to add a sharing policy to the backup vault | |
backup:DescribeBackupJob | Docs | Grants permission to describe a backup job | |
backup:DescribeBackupVault | Docs | Grants permission to describe a new backup vault with the specified name | |
backup:DescribeCopyJob | Docs | Grants permission to describe a copy job | |
backup:DescribeFramework | Docs | Grants permission to describe a framework with the specified name | |
backup:DescribeGlobalSettings | Docs | Grants permission to describe global settings | |
backup:DescribeProtectedResource | Docs | Grants permission to describe a protected resource | |
backup:DescribeRecoveryPoint | Docs | Grants permission to describe a recovery point | |
backup:DescribeRegionSettings | Docs | Grants permission to describe region settings | |
backup:DescribeReportJob | Docs | Grants permission to describe a report job | |
backup:DescribeReportPlan | Docs | Grants permission to describe a report plan with the specified name | |
backup:DescribeRestoreJob | Docs | Grants permission to describe a restore job | |
backup:ExportBackupPlanTemplate | Docs | Grants permission to export a backup plan as a JSON | |
backup:GetBackupPlan | Docs | Grants permission to get a backup plan | |
backup:GetBackupPlanFromJSON | Docs | Grants permission to transform a JSON to a backup plan | |
backup:GetBackupPlanFromTemplate | Docs | Grants permission to transform a template to a backup plan | |
backup:GetBackupSelection | Docs | Grants permission to get a backup plan resource assignment | |
backup:GetBackupVaultAccessPolicy | Docs | Grants permission to get backup vault access policy | |
backup:GetBackupVaultNotifications | Docs | Grants permission to get backup vault notifications | |
backup:GetBackupVaultSharingPolicy | Docs | Grants permission to get backup vault sharing policy | |
backup:GetLegalHold | Docs | Grants permission to get a legal hold | |
backup:GetRecoveryPointRestoreMetadata | Docs | Grants permission to get recovery point restore metadata | |
backup:GetRestoreJobMetadata | Docs | Grants permission to get the restore metadata associated with a restore job | |
backup:GetRestoreTestingInferredMetadata | Docs | Grants permission to get inferred metadata generated by restore testing | |
backup:GetRestoreTestingPlan | Docs | Grants permission to get a restore testing plan | |
backup:GetRestoreTestingSelection | Docs | Grants permission to get a restore testing plan resource assignment | |
backup:GetSupportedResourceTypes | Docs | Grants permission to get supported resource types | |
backup:ListTags | Docs | Grants permission to list tags for a resource | |
backup:TagResource | Docs | Grants permission to tag a resource | |
backup:UntagResource | Docs | Grants permission to untag a resource | |
backup:CancelLegalHold | Docs | Grants permission to cancel a legal hold | |
backup:CopyFromBackupVault | Docs | Grants permission to copy from a backup vault | |
backup:CopyIntoBackupVault | Docs | Grants permission to copy into a backup vault | |
backup:CreateBackupPlan | Docs | Grants permission to create a new backup plan | |
backup:CreateBackupSelection | Docs | Grants permission to create a new resource assignment in a backup plan | |
backup:CreateBackupVault | Docs | Grants permission to create a new backup vault | |
backup:CreateFramework | Docs | Grants permission to create a new framework | |
backup:CreateLegalHold | Docs | Grants permission to create a new legal hold | |
backup:CreateLogicallyAirGappedBackupVault | Docs | Grants permission to create a new logically air-gapped backup vault, a logical container where backups are stored | |
backup:CreateReportPlan | Docs | Grants permission to create a new report plan | |
backup:CreateRestoreTestingPlan | Docs | Grants permission to create a new restore testing plan | |
backup:CreateRestoreTestingSelection | Docs | Grants permission to create a new resource assignment in a restore testing plan | |
backup:DeleteBackupPlan | Docs | Grants permission to delete a backup plan | |
backup:DeleteBackupSelection | Docs | Grants permission to delete a resource assignment from a backup plan | |
backup:DeleteBackupVault | Docs | Grants permission to delete a backup vault | |
backup:DeleteBackupVaultLockConfiguration | Docs | Grants permission to remove the lock configuration from a backup vault | |
backup:DeleteBackupVaultNotifications | Docs | Grants permission to remove the notifications from a backup vault | |
backup:DeleteFramework | Docs | Grants permission to delete a framework | |
backup:DeleteRecoveryPoint | Docs | Grants permission to delete a recovery point from a backup vault | |
backup:DeleteReportPlan | Docs | Grants permission to delete a report plan | |
backup:DeleteRestoreTestingPlan | Docs | Grants permission to delete a restore testing plan | |
backup:DeleteRestoreTestingSelection | Docs | Grants permission to delete a resource assignment from a restore testing plan | |
backup:DisassociateRecoveryPoint | Docs | Grants permission to disassociate a recovery point from a backup vault | |
backup:DisassociateRecoveryPointFromParent | Docs | Grants permission to disassociate a recovery point from its parent | |
backup:PutBackupVaultLockConfiguration | Docs | Grants permission to add a lock configuration to the backup vault | |
backup:PutBackupVaultNotifications | Docs | Grants permission to add an SNS topic to the backup vault | |
backup:PutRestoreValidationResult | Docs | Grants permission to put a restore validation result | |
backup:StartBackupJob | Docs | Grants permission to start a new backup job | |
backup:StartCopyJob | Docs | Grants permission to copy a backup from a source backup vault to a destination backup vault | |
backup:StartReportJob | Docs | Grants permission to start a new report job | |
backup:StartRestoreJob | Docs | Grants permission to start a new restore job | |
backup:StopBackupJob | Docs | Grants permission to stop a backup job | |
backup:UpdateBackupPlan | Docs | Grants permission to update a backup plan | |
backup:UpdateFramework | Docs | Grants permission to update a framework | |
backup:UpdateGlobalSettings | Docs | Grants permission to update the current global settings for the AWS Account | |
backup:UpdateRecoveryPointLifecycle | Docs | Grants permission to update the lifecycle of the recovery point | |
backup:UpdateRegionSettings | Docs | Grants permission to update the current service opt-in settings for the Region | |
backup:UpdateReportPlan | Docs | Grants permission to update a report plan | |
backup:UpdateRestoreTestingPlan | Docs | Grants permission to update a restore testing plan | |
backup:UpdateRestoreTestingSelection | Docs | Grants permission to update a resource assignment in a restore testing plan |
aws:RequestTag/${TagKey}
aws:ResourceTag/${TagKey}
aws:TagKeys
backup:ChangeableForDays
backup:CopyTargetOrgPaths
backup:CopyTargets
backup:FrameworkArns
backup:MaxRetentionDays
backup:MinRetentionDays