Document history for AWS Backup

AWS Backup now supports both Internet Protocols version 6 (IPv6) and IPv4.

For more information on dual stack capabilities and endpoints, see AWS Backup network.

AWS Backup support for Amazon Timestream is now available in AWS GovCloud (US-West).

For more information, see Supported services by AWS Regions and Amazon Timestream backups.

AWS Backup introduces the option to search your backup metadata for item level properties to help you find recovery points and other files or objects you want to restore.

See Backup search for more details.

AWS Backup added the AWSBackupServiceRolePolicyForItemRestores AWS managed policy.

For more information, see Managed policies for AWS Backup.

AWS Backup added the AWSBackupServiceRolePolicyForIndexing AWS managed policy.

For more information, see Managed policies for AWS Backup.

Cross-account management for monitoring backup, copy, and, restore jobs through AWS Backup and AWS Organizations integration is now available in AWS Regions where opt-in is required.

For more information, see Feature availability by Region.

AWS Backup support for Amazon Timestream is now available in Asia Pacific (Mumbai).

For more information, see Supported services by AWS Regions and Amazon Timestream backups.

AWS Backup adds additional flexibility when you restore S3 backups. You can now restore additional versions of objects, including restoring all versions.

For more information, see Restore S3 data using AWS Backup.

AWS Backup customers can now create cross-Region copies of Amazon Neptune backups in more Regions, including Africa (Cape Town), Asia Pacific (Jakarta), and Asia Pacific (Osaka).

For more information, see Feature availability by Region and Creating backup copies across AWS Regions.

Cross-Region copy of Amazon S3 backups is now supported in AWS Regions where opt-in is required.

For more information, see Feature availability by AWS Region.

AWS Backup Audit Manager is now available in AWS Region Asia Pacific (Osaka).

For more information, see Feature availability by Region and Backup Audit Manager.

Backup and restore for many resource types are now available in AWS Region Asia Pacific (Malaysia).

For compatible backup features, see Feature availability by AWS Region.

For supported resource types, see Supported services by AWS Region.

AWS Backup Audit Manager now offers the control Resources in a logically air-gapped vault to assist with monitoring that resources have been copied to a logically air-gapped vault within the time frame specified.

For more information, see Controls and remediation and Audit restore testing.

AWS Backup customers can now create cross-Region copies of Amazon Neptune backups in more Regions, including Asia Pacific (Hong Kong), Israel (Tel Aviv), Middle East (Bahrain), and Middle East (UAE).

For more information, see feature availability by Region and creating backup copies across AWS Regions.

Users who have backed up SAP HANA databases on Amazon EC2 instances can now copy snapshots from full backups to other Regions and other accounts.

For more information, see SAP HANA databases on Amazon EC2 instances.

AWS Backup has introduced a secondary type of vault for storing copies of backups. Logically air-gapped vaults offer enhanced security features as well as the ability to share vault access with accounts through AWS RAM.

For more information, see Logically air-gapped vault.

August 7, 2024

AWS Backup support for Amazon Simple Storage Service (Amazon S3) is now available in Canada West (Calgary).

Customers can now backup and restore resources within the Canada West (Calgary) Region. For more information on AWS Backup Amazon S3 Region availability, see Supported Services by AWS Region.

Logically air-gapped vault preview has ended.

AWS Backup support of Amazon EBS snapshot archive tier is now available in the following Regions:

AWS Backup added permission backup:TagResource to the following managed policies:

For more information, see Policy updates.

May 17, 2024

Backup and restore for many resource types are now available in AWS Region Canada West (Calgary).

For compatible backup features, see Feature availability by AWS Region.

For supported resource types, see Supported services by AWS Region.

AWS Backup updated the policy AWSServiceRolePolicyForBackupRestoreTesting by adding permissions to support additional resource types within the restore testing feature.

For more information on the specific permissions added, see Policy updates.

AWS Backup now supports backup and restore of FSx for ONTAP FlexGroup volumes in most AWS Regions.

For more information, see Restoring an Amazon FSx file system

AWS Backup now offers support SAP HANA High Availability databases on Amazon EC2 backup and restore.

For more information, see SAP HANA on Amazon EC2 backups and Restoring an SAP HANA High Availability system

AWS Backup Audit Manager now offers the control Restore time for resources meet target to assist with monitoring restore times. This control checks if the restore time of a resource meets the target duration.

For more information, see Controls and remediation and Audit restore testing.

AWS Backup introduces restore testing, which brings automated and periodic evaluation of restore viability, as well as the ability to monitor restore job duration times.

For more information, see Restore testing.

AWS Backup added the permissions ec2:DescribeSnapshotTierStatus and ec2:ModifySnapshotTier to the managed policies AWSBackupServiceRolePolicyForBackups and AWSBackupServiceLinkedRolePolicyForBackup. AWS Backup also added the permissions ec2:DescribeSnapshotTierStatus and ec2:RestoreSnapshotTier to managed policy AWSBackupServiceRolePolicyForRestores.

These permissions are necessary for users to have the option to transition Amazon EBS resources stored with AWS Backup to archive storage and to restore resources from the archive storage tier.

For more information, see Policy updates.

November 27, 2023

AWS Backup added restore-testing.backup.amazonaws.com to IamPassRolePermissions and IamCreateServiceLinkedRolePermissions. This addition is necessary for AWS Backup to conduct restore tests on behalf of customers.

AWS Backup has added the new service-linked role named AWSServiceRoleForBackupRestoreTesting, which provides backup permissions to conduct restore testing.

This new service-linked role provides AWS Backup with permissions necessary to conduct restore testing. The permissions include the actions list, read, and write for the following services to be included in restore tests: Aurora, DocumentDB, DynamoDB, Amazon EBS, Amazon EC2, Amazon EFS, FSx for Lustre, FSx for Windows File Server, FSx for ONTAP, FSx for OpenZFS, Amazon Neptune, Amazon RDS, and Amazon S3.

November 27, 2023

The AWS Backup console now displays a jobs dashboard, simplifying backup health monitoring at scale with a new visual user interface and aggregated backup, copy, and restore metrics for services supported by AWS Backup.

The jobs dashboard is available in all Regions where AWS Backup Audit Manager is available.

Regions not listed will still be able to access the CloudWatch dashboard.

For more information, see AWS Backup console dashboards.

AWS Backup has expanded its support for backups of AWS CloudFormation resources. Your CloudFormation application stacks that have nested stacks within them can be included in your backups.

For more information, see CloudFormation stack backups.

AWS Backup support for Amazon S3 is now available in China (Beijing) and China (Ningxia) Regions.

For more information, see Feature availability by Region.

AWS Backup now supports continuous backups and point-in-time restore (PITR) for Aurora resources.

For more information, see Continuous backups and Point-in-time recovery.

AWS Backup now supports the option to exclude chosen resources from your AWS CloudFormation stack.

For more information, see AWS CloudFormation stack backups.

AWS Backup plan rules can now have a specified timezone for backup windows.

For more information, see Managing backup plans.

Many AWS Backup features are now available in the new Israel (Tel Aviv) Region.

To see what resources are supported, visit Feature availability by AWS Region.

August 22, 2023

AWS Backup Audit Manager report generation can now be accessed by delegated administrator accounts. For more information, see

AWS Backup has increased performance, size, and speed capabilities for S3 bucket backups.

For more information, see Amazon S3 backups.

Tags that are part of a backup can now be copied when you create a restore job in China (Beijing) or China (Ningxia) Regions.

For more information, see Copy tags during a restore.

AWS Backup support for Amazon S3 is now available in Europe (Spain), Europe (Zurich), Asia Pacific (Hyderabad), and Asia Pacific (Melbourne) Regions.

For more information, see Feature availability by Region.

AWS Backup now supports cross-account backup copy of most resources in the following Regions: Asia Pacific (Jakarta), Middle East (Bahrain), Asia Pacific (Hong Kong), Africa (Cape Town), Europe (Milan), Asia Pacific (Osaka), Middle East (UAE) , Europe (Spain), Europe (Zurich), Asia Pacific (Hyderabad), and Asia Pacific (Melbourne).

For more information, see Feature availability by Region

AWS Backup has expanded AWS Backup Audit Manager into AWS GovCloud (US-East) and AWS GovCloud (US-West).

For more information, see Feature availability by Region

AWS Backup now supports cross-account management of resources in AWS GovCloud (US-East) and AWS GovCloud (US-West).

For more information, see Managing AWS Backup resources across multiple AWS accounts.

Tags that are part of a backup can now be copied when you create a restore job.

For more information, see Copy tags during a restore.

You can now choose to receive notifications related to backup, copy, and restore events through the AWS User Notifications console.

For more information, see Getting started with AWS User Notifications.

AWS Backup support for Amazon S3 (Amazon Simple Storage Service) is now available in South America (São Paulo) Region.

For more information, see Amazon S3 backups.

AWS Backup is now available in Asia Pacific (Melbourne) Region.

For more information, see Feature availability by AWS Region.

AWS Backup support for Amazon S3 (Amazon Simple Storage Service) is now available in AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions

For more information, see Amazon S3 backups.

AWS Backup now offers the ability to backup and restore SAP HANA databases running on Amazon EC2 instances in most Regions.

For more information, see SAP HANA databases on Amazon EC2 instances backup.

AWS Backup support has expanded to new Regions, including Europe (Spain), Europe (Zurich), and Asia Pacific (Hyderabad). Supported resources can be backed up and restored within these Regions.

For more information, see Feature availability by AWS Region.

Updated AWS managed policy AWSBackupAuditAccess. AWS Backup replaced the resource selection within the API config:DescribeComplianceByConfigRule with a wildcard resource.

For more information see Policy updates for AWS Backup.

AWS Backup support for Amazon S3 is now available in Asia Pacific (Jakarta) and Middle East (UAE) Regions.

VMware VM (virtual machine) backups that experience CBT (Changed Block Tracking) data issues now contain additional information to help remedy and troubleshoot.

For more information, see Incremental VM backups and Troubleshoot your virtual machines.

AWS Backup gateway now supports configuring multiple network adapters

For more information on configuring your network adapters, see Configure your gateway for multiple NICs in VMware in the AWS Backup Developer Guide.

AWS Backup now supports backup and restore of virtual machines which run on VMware vSphere 8.

For more information on supported VMware options, see Supported VMs in the AWS Backup Developer Guide.

Backup Audit Manager now offers support for Amazon Relational Database Service Multi-Availability Zone backups.

For more information, see how to audit backups and create reports with AWS Backup Audit Manager.

AWS Backup now offers expanded backup capabilities for Timestream backups. Backup plans can now take incremental backups to lower the time required to backup Timestream resources and lower storage costs.

For more information, see Amazon Timestream backups.

AWS Backup now offers cross-Region backups in Asia Pacific (Jakarta) Region, Middle East (Bahrain) Region, Asia Pacific (Hong Kong) Region, Africa (Cape Town) Region, and Europe (Milan) Region for most resources.

For more information, see Creating backup copies across AWS Regions.

AWS Backup Gateway now allows limits on the upload throughput from gateways to AWS Backup to control the amount of network bandwidth used by the gateway.

To support this feature, AWS Backup has created and updated managed policies, including AWSBackupFullAccess and AWSBackupOperatorAccess.

For more information, see Backup Gateway bandwidth throttling.

AWS Backup Gateway now supports VMware tags. Users have the additional flexibility to create AWS tags that match tags used for virtual machines.

To support this feature, AWS Backup has created and updated managed policies, including AWSBackupGatewayServiceRolePolicyForVirtualMachineMetadataSync, AWSBackupFullAccess, and AWSBackupOperatorAccess.

For more information, see VMware tags.

AWS Backup introduces a new tool to help protect recovery points through a legal hold. For more information see Legal hold.

AWS Backup Audit Manager brings additional functionality to compliance and job reports. Users can generate reports incorporating multiple Regions and multiple accounts.

For more information, see Working with audit reports.

AWS Backup provides the capability to backup CloudFormation and restore applications containing multiple resources by backing up a stack and restoring the resources within it.

For more information, see Application stack backups.

AWS Backup accounts enrolled in AWS Organizations can designate member accounts as delegated administrator accounts.

For more information, see Managing multiple accounts with AWS Organizations.

Public Preview of SAP HANA on Amazon EC2 Instances backup and restore

AWS Backup and AWS Backint are offering an integrated public preview of functionality to backup and restore SAP HANA databases on EC2 instances.

For more information, see our Public Preview of SAP HANA on Amazon EC2 instances.

To support this preview, AWS Backup has provided policy updates and new AWS Managed Policies for these features.

November 20, 2022

AWS Backup now offers the ability to restore virtual machines to Amazon EC2 instances, in addition to the ability to restore machines to EBS, VMware, VMware Cloud on AWS, and VMware Cloud on AWS Outposts.

For more information, see documentation on how to Use the AWS Backup console to restore virtual machine recovery points.

AWS Backup Vault Lock can be now created in governance mode for additional IAM protections or in compliance mode to ensure immutability.

Learn more at AWS Backup Vault Lock.

AWS Backup now offers cross-Region and cross-account backup copying for Amazon S3 backups.

For more information see Amazon S3 backups.

AWS Backup Audit Manager now offers additional controls to support monitoring and auditing FSx for ONTAP volumes, including Backup resources are included in at least one backup plan and Last recovery point created.

For more information, see AWS Backup Audit Manager controls and remediation.

AWS Backup has added a Multi-Availability Zone cluster backup and restore option with one primary and two readable standby database instances.

To learn more, see Amazon RDS Multi-AZ backups.

AWS Backup Audit Manager offers a new audit control for increased compliance support.

Last recovery point created is an optional additional control to ensure recovery points are created within specified time frames.

To learn more, see Last recovery point created control.

AWS Backup Gateway provided a sample endpoint to assist users with connecting to VPNs (Virtual Private Networks). For more information, see Creating a AWS Backup VPC endpoint.

AWS Backup now supports Amazon VPC endpoints for VMware, enabling you to use a virtual private network between your VMware environments and AWS using AWS PrivateLink.

For more information, see Creating a gateway and AWS Backup and AWS PrivateLink.

Backup Audit Manager now offers support for the compliance control Backup resources protected by backup plan for S3 resource types.

For more information, see AWS Backup Audit Manager controls and remediation.

Backup Audit Manager now offers support for the compliance control Backup resources protected by backup plan for Storage Gateway resource types.

For more information, see AWS Backup Audit Manager controls and remediation.

You can now use AWS Backup to copy Amazon FSx backups across AWS Regions and accounts. For more information, see Creating a Backup Copy.

If you use customer managed policies, you should add the new permission fsx:CopyBackup to prevent existing backup jobs from failing. For that permission, see the last statement in the Amazon FSx backup policy in the Customer managed policies.