# Resources created for AWS Backup
<a name="backup-resources"></a>

**The tables on this page show resources that are created in AWS Control Tower accounts when you enable AWS Backup.**

The following table shows the resources that AWS Control Tower creates in the AWS Control Tower **Central Backup** account when you enable AWS Backup for the landing zone organization. 


| **Description** | **Resources for the Central Backup account** | 
| --- | --- | 
| Which OU contains the account? | Security OU | 
| What action created the resource? | Landing zone Create or Update | 
| What resources are created? | Central Backup vault—aws-controltower-central-backupvault-\$1 | 
| What Regions are included? | All governed Regions | 
| What controls are related to these resources? | CT.BACKUP.PV.3 | 

The following table shows the resources that AWS Control Tower creates in the AWS Control Tower **Backup Administrator** account when you enable AWS Backup for the landing zone organization.


| **Description** | **Resources for the Backup Administrator account: This is the delegated administrator account for AWS Backup** | 
| --- | --- | 
| Which OU contains the account? | Security OU | 
| What action created the resource? | Landing zone Create or Update | 
| What resources are created? | Backup Audit Manager (BAM) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/controltower/latest/userguide/backup-resources.html) Amazon S3 bucket for storing BAM logs—`aws-controltower-backup-reports-{accountId}-*` Amazon S3 access logging bucket—`aws-controltower-backup-reports-log-{accountId}-*` | 
| What Regions are included? | Home Region | 
| What controls are related to these resources? | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/controltower/latest/userguide/backup-resources.html) | 

The following table shows the resources that AWS Control Tower creates in the AWS Control Tower **Audit** account and in the AWS Control Tower **Log Archive** account when you enable AWS Backup for the Security OU.


| **Description** | **Resources for Audit and Log Archive accounts** | 
| --- | --- | 
| Which OU contains the account? | Security OU | 
| What action created the resource? | Enabling the BackupBaseline | 
| What resources are created? | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/controltower/latest/userguide/backup-resources.html) | 
| What Regions are included? | All governed Regions | 
| What controls are related to these resources? | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/controltower/latest/userguide/backup-resources.html) | 

**Note**  
 When you apply the `BackupBaseline` to the Security OU, all member accounts in that OU receive the AWS Backup resources, not just the **Audit** and **Log Archive** accounts. 

The following table shows the resources that AWS Control Tower creates in the AWS Control Tower **OU member accounts** when you enable AWS Backup on a target OU.


| **Description** | **Resources for member accounts in other OUs** | 
| --- | --- | 
| Which OU contains the account? | Any OU other than the Security OU | 
| What action created the resource? | Enabling the BackupBaseline | 
| What resources are created? | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/controltower/latest/userguide/backup-resources.html) | 
| What Regions are included? | All governed Regions | 
| What controls are related to these resources? | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/controltower/latest/userguide/backup-resources.html) |