backup

119 actions in the backup service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

backup:AssociateBackupVaultMpaApprovalTeam

Write

Grants permission to associate an MPA approval team with a backup vault

backup:CancelLegalHold

Write

Grants permission to cancel a legal hold

backup:CopyFromBackupVault

Write

Grants permission to copy from a backup vault

backup:CopyIntoBackupVault

Write

Grants permission to copy into a backup vault

backup:CreateBackupAccessPoint

Write

Grants permission to create a new access point for backup instant access

backup:CreateBackupPlan

Write

Grants permission to create a new backup plan

backup:CreateBackupSelection

Write

Grants permission to create a new resource assignment in a backup plan

backup:CreateBackupVault

Write

Grants permission to create a new backup vault

backup:CreateFramework

Write

Grants permission to create a new framework

backup:CreateLegalHold

Write

Grants permission to create a new legal hold

backup:CreateLogicallyAirGappedBackupVault

Write

Grants permission to create a new logically air-gapped backup vault, a logical container where backups are stored

backup:CreateReportPlan

Write

Grants permission to create a new report plan

backup:CreateRestoreAccessBackupVault

Write

Grants permission to create a restore access backup vault

backup:CreateRestoreTestingPlan

Write

Grants permission to create a new restore testing plan

backup:CreateRestoreTestingSelection

Write

Grants permission to create a new resource assignment in a restore testing plan

backup:CreateTieringConfiguration

Write

Grants permission to create a new tiering configuration

backup:DeleteBackupAccessPoint

Write

Grants permission to delete the access point

backup:DeleteBackupPlan

Write

Grants permission to delete a backup plan

backup:DeleteBackupSelection

Write

Grants permission to delete a resource assignment from a backup plan

backup:DeleteBackupVault

Write

Grants permission to delete a backup vault

backup:DeleteBackupVaultAccessPolicy

Permissions management

Grants permission to delete backup vault access policy

backup:DeleteBackupVaultLockConfiguration

Write

Grants permission to remove the lock configuration from a backup vault

backup:DeleteBackupVaultNotifications

Write

Grants permission to remove the notifications from a backup vault

backup:DeleteBackupVaultSharingPolicy

Permissions management

Grants permission to delete backup vault sharing policy

backup:DeleteFramework

Write

Grants permission to delete a framework

backup:DeleteRecoveryPoint

Write

Grants permission to delete a recovery point from a backup vault

backup:DeleteReportPlan

Write

Grants permission to delete a report plan

backup:DeleteRestoreTestingPlan

Write

Grants permission to delete a restore testing plan

backup:DeleteRestoreTestingSelection

Write

Grants permission to delete a resource assignment from a restore testing plan

backup:DeleteTieringConfiguration

Write

Grants permission to delete a tiering configuration

backup:DescribeBackupAccessPoint

Read

Grants permission to return information about the specified access point

backup:DescribeBackupJob

Read

Grants permission to describe a backup job

backup:DescribeBackupVault

Read

Grants permission to describe a new backup vault with the specified name

backup:DescribeCopyJob

Read

Grants permission to describe a copy job

backup:DescribeFramework

Read

Grants permission to describe a framework with the specified name

backup:DescribeGlobalSettings

Read

Grants permission to describe global settings

backup:DescribeProtectedResource

Read

Grants permission to describe a protected resource

backup:DescribeRecoveryPoint

Read

Grants permission to describe a recovery point

backup:DescribeRegionSettings

Read

Grants permission to describe region settings

backup:DescribeReportJob

Read

Grants permission to describe a report job

backup:DescribeReportPlan

Read

Grants permission to describe a report plan with the specified name

backup:DescribeRestoreJob

Read

Grants permission to describe a restore job

backup:DescribeScanJob

Read

Grants permission to describe a scan job

backup:DisassociateBackupVaultMpaApprovalTeam

Write

Grants permission to disassociate an MPA approval team from a backup vault

backup:DisassociateRecoveryPoint

Write

Grants permission to disassociate a recovery point from a backup vault

backup:DisassociateRecoveryPointFromParent

Write

Grants permission to disassociate a recovery point from its parent

backup:ExportBackupPlanTemplate

Read

Grants permission to export a backup plan as a JSON

backup:GetBackupPlan

Read

Grants permission to get a backup plan

backup:GetBackupPlanFromJSON

Read

Grants permission to transform a JSON to a backup plan

backup:GetBackupPlanFromTemplate

Read

Grants permission to transform a template to a backup plan

backup:GetBackupSelection

Read

Grants permission to get a backup plan resource assignment

backup:GetBackupVaultAccessPolicy

Read

Grants permission to get backup vault access policy

backup:GetBackupVaultNotifications

Read

Grants permission to get backup vault notifications

backup:GetBackupVaultSharingPolicy

Read

Grants permission to get backup vault sharing policy

backup:GetLegalHold

Read

Grants permission to get a legal hold

backup:GetPITRMalwareScanResults

Read

Grants permission to get point-in-time recovery (PITR) malware scan results

backup:GetRecoveryPointIndexDetails

Read

Grants permission to get indexing details for a recovery point

backup:GetRecoveryPointRestoreMetadata

Read

Grants permission to get recovery point restore metadata

backup:GetRestoreJobMetadata

Read

Grants permission to get the restore metadata associated with a restore job

backup:GetRestoreTestingInferredMetadata

Read

Grants permission to get inferred metadata generated by restore testing

backup:GetRestoreTestingPlan

Read

Grants permission to get a restore testing plan

backup:GetRestoreTestingSelection

Read

Grants permission to get a restore testing plan resource assignment

backup:GetSupportedResourceTypes

Read

Grants permission to get supported resource types

backup:GetTieringConfiguration

Read

Grants permission to describe a tiering configuration

backup:ListBackupJobs

List

Grants permission to list backup jobs

backup:ListBackupJobSummaries

List

Grants permission to list backup job summaries

backup:ListBackupPlans

List

Grants permission to list backup plans

backup:ListBackupPlanTemplates

List

Grants permission to list backup plan templates provided by AWS Backup

backup:ListBackupPlanVersions

List

Grants permission to list backup plan versions

backup:ListBackupSelections

List

Grants permission to list resource assignments for a specific backup plan

backup:ListBackupVaults

List

Grants permission to list backup vaults

backup:ListCopyJobs

List

Grants permission to list copy jobs

backup:ListCopyJobSummaries

List

Grants permission to list copy job summaries

backup:ListFrameworks

List

Grants permission to list frameworks

backup:ListIndexedRecoveryPoints

List

Grants permission to get list indexed recovery points

backup:ListIndexedRecoveryPointsForSearch

Permissions management

Grants permission to list indexed recovery points to search

backup:ListLegalHolds

List

Grants permission to list legal holds

backup:ListProtectedResources

List

Grants permission to list protected resources by AWS Backup

backup:ListProtectedResourcesByBackupVault

List

Grants permission to list protected resources inside a backup vault

backup:ListRecoveryPointsByBackupVault

List

Grants permission to list recovery points inside a backup vault

backup:ListRecoveryPointsByLegalHold

List

Grants permission to list recovery points by legal hold

backup:ListRecoveryPointsByResource

List

Grants permission to list recovery points for a resource

backup:ListReportJobs

List

Grants permission to list report jobs

backup:ListReportPlans

List

Grants permission to list report plans

backup:ListRestoreAccessBackupVaults

List

Grants permission to list a restore access backup vaults associated with a backup vault

backup:ListRestoreJobs

List

Grants permission to list restore jobs

backup:ListRestoreJobsByProtectedResource

List

Grants permission to list restore jobs for a protected resource

backup:ListRestoreJobSummaries

List

Grants permission to list restore job summaries

backup:ListRestoreTestingPlans

List

Grants permission to list restore testing plans

backup:ListRestoreTestingSelections

List

Grants permission to list resource assignments for a specific restore testing plan

backup:ListScanJobs

List

Grants permission to list scan jobs

backup:ListScanJobSummaries

List

Grants permission to list scan job summaries

backup:ListTags

Read

Grants permission to list tags for a resource

backup:ListTieringConfigurations

List

Grants permission to list tiering configurations

backup:PutBackupVaultAccessPolicy

Permissions management

Grants permission to add an access policy to the backup vault

backup:PutBackupVaultLockConfiguration

Write

Grants permission to add a lock configuration to the backup vault

backup:PutBackupVaultNotifications

Write

Grants permission to add an SNS topic to the backup vault

backup:PutBackupVaultSharingPolicy

Permissions management

Grants permission to add a sharing policy to the backup vault

backup:PutRestoreValidationResult

Write

Grants permission to put a restore validation result

backup:RevokeRestoreAccessBackupVault

Write

Grants permission to revoke a restore access backup vault

backup:SearchRecoveryPoint

Permissions management

Grants permission to search a recovery point

backup:StartBackupJob

Write

Grants permission to start a new backup job

backup:StartCopyJob

Write

Grants permission to copy a backup from a source backup vault to a destination backup vault

backup:StartReportJob

Write

Grants permission to start a new report job

backup:StartRestoreJob

Write

Grants permission to start a new restore job

backup:StartScanJob

Write

Grants permission to start a new scan job

backup:StopBackupJob

Write

Grants permission to stop a backup job

backup:TagResource

Tagging

Grants permission to tag a resource

backup:UntagResource

Tagging

Grants permission to untag a resource

backup:UpdateBackupPlan

Write

Grants permission to update a backup plan

backup:UpdateFramework

Write

Grants permission to update a framework

backup:UpdateGlobalSettings

Write

Grants permission to update the current global settings for the AWS Account

backup:UpdateRecoveryPointIndexSettings

Write

Grants permission to update recovery point index settings

backup:UpdateRecoveryPointLifecycle

Write

Grants permission to update the lifecycle of the recovery point

backup:UpdateRegionSettings

Write

Grants permission to update the current service opt-in settings for the Region

backup:UpdateReportPlan

Write

Grants permission to update a report plan

backup:UpdateRestoreTestingPlan

Write

Grants permission to update a restore testing plan

backup:UpdateRestoreTestingSelection

Write

Grants permission to update a resource assignment in a restore testing plan

backup:UpdateTieringConfiguration

Write

Grants permission to update a tiering configuration