AWS Backup now supports Amazon EKS, providing a fully managed, centralized solution to back up and restore Kubernetes clusters and application data without requiring custom scripts or third-party tools.

When operating in the cloud, data storage and recovery are among the most crucial components. Amazon...

AWS Backup now supports Amazon EKS, providing a fully managed, centralized solution to back up and restore Kubernetes clusters and application data without requiring custom scripts or third-party tools.

Amazon GuardDuty Malware Protection for AWS Backup is now available for Amazon S3 continuous backups. You can now scan your S3 continuous backups for malware and identify clean points in time across your entire backup timeline for safe recovery. You can enable full or incremental malware scans for S3 continuous backups within your backup plan, and run on-demand scans up to any restorable point in time. You can now query the malware scan status at any point in time within your continuous backup using the new GetPITRMalwareScanResults API, allowing you to verify whether a specific recovery time is clean before initiating a restore. Support for S3 continuous backups is available in all AWS Regions where Amazon GuardDuty Malware Protection for AWS Backup is supported. You can get started using the AWS Backup console, API, or CLI. To learn more, visit the AWS Backup documentation and Amazon GuardDuty Malware Protection documentation.

AWS Backup now lets you choose whether to include Access Control Lists (ACLs) and ObjectTags when backing up your Amazon S3 buckets. Previously, AWS Backup included these metadata components for all objects by default. This new capability lets you customize your backup approach based on your recovery needs, so you can include only the metadata you need. This capability is available in all AWS Regions where AWS Backup for Amazon S3 is available. For pricing and regional availability information, see the AWS Backup pricing page. To learn more about AWS Backup for Amazon S3, visit the product page and technical documentation. To get started, visit the AWS Backup console.

AWS Backup now supports copying database snapshots across AWS Regions and accounts using a single copy action. This feature supports Amazon RDS, Amazon Aurora, Amazon Neptune, and Amazon DocumentDB snapshots. It eliminates the need for sequential copying steps. You can use cross-Region and cross-account snapshot copies to protect against incidents like ransomware attacks and Region outages that might affect your production accounts or primary Regions. Previously, you needed to perform this as a two-step process—first copying to a different Region, and then to a different account (or vice versa). Now, by completing this in one step, you can achieve faster recovery point objectives (RPOs) while eliminating costs associated with intermediate copies. This streamlined process also simplifies the workflow by removing the need for custom scripts or Lambda functions that monitor intermediate copy status. This feature is available for all Amazon RDS and Amazon Aurora engines, Amazon Neptune and Amazon DocumentDB, in all regions where AWS Backup supports cross-Region and cross-account copying of snapshots in separate steps. You can start using this feature today through the AWS Management Console, AWS Command Line Interface (CLI), or AWS SDKs. To get started, refer the AWS Backup documentation.

You can now designate delegated administrators for AWS Backup in 17 additional AWS Regions, enabling assigned users in member accounts to perform most administrative tasks. Delegated administrators are now supported in Africa (Cape Town), Asia Pacific (Hong Kong, Hyderabad, Jakarta, Malaysia, Melbourne, New Zealand, Taipei, Thailand), Canada West (Calgary), Europe (Milan, Spain, Zurich), Israel (Tel Aviv), Mexico (Central), and Middle East (Bahrain, UAE). Delegated administration enables organizations to designate a central AWS account to manage backup operations across multiple member accounts, streamlining governance and reducing administrative overhead. Additionally, you can now use AWS Backup Audit Manager cross-Region and cross-account delegated administrator functionality in these Regions, empowering delegated administrators to create audit reports for jobs and compliance for backup plans that span these Regions. For more information on the AWS Backup features available across AWS Regions, see AWS Backup documentation. To get started, visit the AWS Backup console.

AWS Backup now supports Amazon Elastic Kubernetes Service (EKS), providing a fully-managed, centralized solution for backing up EKS cluster state and persistent application data. You can now use AWS Backup to help protect your entire EKS environments through a centralized, policy-driven backup service. You now get comprehensive data protection capabilities through AWS Backup across your Amazon EKS Clusters, including automated scheduling, retention management, immutable vaults, cross-Region and cross-account copies. AWS Backup delivers a new an agent-free solution that works natively with AWS, replacing custom scripts or third-party tools to perform backups for each cluster. You can restore entire EKS clusters, specific namespaces, or individual persistent volumes. Use AWS Backup to protect your clusters for disaster recovery, to help meet your compliance requirements, or for additional protection before EKS cluster upgrades. AWS Backup for EKS is available in all AWS Regions where both AWS Backup and Amazon EKS are available. For the most up-to-date information on Regional availability, please refer to the AWS Backup Regional availability. To get started with AWS Backup for Amazon EKS, visit the AWS Backup console, refer to the AWS Backup documentation, or read the AWS News Blog.

AWS Backup Audit Manager now supports cross-account, cross-Region reports in Asia Pacific (Hyderabad, Jakarta, Melbourne), Europe (Spain, Zurich), and Middle East (UAE) Regions. Now, you can use your AWS Organizations’ management or delegated administrator account to generate aggregated cross-account and cross-Region reports on your data protection policies and retrieve operational data about your backup and recovery activities. AWS Backup enables you to centralize and automate data protection policies across AWS services based on organizational best practices and regulatory standards, and AWS Backup Audit Manager is a feature within the AWS Backup service that allows you to audit and report on the compliance of your data protection policies to help you meet your business and regulatory needs. To find a full list of AWS Regions in which AWS Backup Audit Manager is available, please refer to the https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-feature-availability.html#features-by-region. To learn more about AWS Backup Audit Manager, visit the https://aws.amazon.com/backup/ and https://docs.aws.amazon.com/aws-backup/latest/devguide/aws-backup-audit-manager.html. To get started, visit the https://console.aws.amazon.com/backup.

AWS Backup now executes S3 backup copy operations up to 8x faster for buckets with millions of objects and low change rates between backup copies through enhanced change tracking. This improvement reduces the time required to copy S3 backups across accounts and AWS Regions by eliminating the need to scan all objects in the destination account or Region. With this improvement, AWS Backup records object events as they occur, resulting in faster copy operations and reduced processing time. The enhancement automatically applies to all new S3 backup cross account and cross-Region copy jobs. This improvement is enabled at no additional cost in all AWS Regions where AWS Backup support Amazon S3 backup cross-account and cross-Region copying. To learn more about AWS Backup for Amazon S3, visit the https://aws.amazon.com/backup/faqs/ and https://docs.aws.amazon.com/aws-backup/latest/devguide/s3-backups.html. To get started, visit the https://console.aws.amazon.com/backup. 

AWS Backup now supports encrypting backups in logically air-gapped vaults with AWS Key Management Service (KMS) customer managed keys (CMKs). This enhancement provides additional encryption options beyond the existing AWS-owned keys, helping organizations meet their regulatory and compliance requirements. You can now create logically air-gapped vaults using your own customer managed keys (CMKs) in AWS KMS, giving you more control over your backup protection strategy. Whether you want to use keys from the same account or across accounts, you maintain centralized key management while preserving the security benefits of logically air-gapped vaults. This integration works seamlessly with your existing logically air-gapped vaults and other AWS Backup features, ensuring no disruption to your backup workflows. AWS KMS customer managed key support with logically air-gapped vaults is available in all AWS Regions where logically air-gapped vaults are currently supported. You can get started with logically air-gapped vault support for CMKs using the AWS Backup console, API, or CLI. When creating a new logically air-gapped vault, you can now choose between an AWS-owned key or your own CMK for encryption. For more information about implementing this feature, visit the AWS Backup product page, documentation, and blog.

You can now designate delegated administrators for AWS Backup in 17 additional AWS Regions, enabling assigned users in member accounts to perform most administrative tasks. Delegated administrators are now supported in Africa (Cape Town), Asia Pacific (Hong Kong, Hyderabad, Jakarta, Malaysia, Melbourne, New Zealand, Taipei, Thailand), Canada West (Calgary), Europe (Milan, Spain, Zurich), Israel (Tel Aviv), Mexico (Central), and Middle East (Bahrain, UAE). Delegated administration enables organizations to designate a central AWS account to manage backup operations across multiple member accounts, streamlining governance and reducing administrative overhead. Additionally, you can now use AWS Backup Audit Manager cross-Region and cross-account delegated administrator functionality in these Regions, empowering delegated administrators to create audit reports for jobs and compliance for backup plans that span these Regions. For more information on the AWS Backup features available across AWS Regions, see https://docs.aws.amazon.com/aws-backup/latest/devguide/whatisbackup.html#features-by-region. To get started, visit the https://console.aws.amazon.com/backup.

AWS Backup now supports copying database snapshots across AWS Regions and accounts using a single copy action. This feature supports Amazon RDS, Amazon Aurora, Amazon Neptune, and Amazon DocumentDB snapshots. It eliminates the need for sequential copying steps. You can use cross-Region and cross-account snapshot copies to protect against incidents like ransomware attacks and Region outages that might affect your production accounts or primary Regions. Previously, you needed to perform this as a two-step process—first copying to a different Region, and then to a different account (or vice versa). Now, by completing this in one step, you can achieve faster recovery point objectives (RPOs) while eliminating costs associated with intermediate copies. This streamlined process also simplifies the workflow by removing the need for custom scripts or Lambda functions that monitor intermediate copy status. This feature is available for all Amazon RDS and Amazon Aurora engines, Amazon Neptune and Amazon DocumentDB, in all regions where AWS Backup supports cross-Region and cross-account copying of snapshots in separate steps. You can start using this feature today through the AWS Management Console, AWS Command Line Interface (CLI), or AWS SDKs. To get started, refer the https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-feature-availability.html#features-by-resource.

AWS Backup now provides more details in backup job API responses and Backup Audit Manager reports to give you better visibility into backup configurations and compliance settings. You can verify your backup policies with a single API call. List and Describe APIs for backup, copy, and restore jobs now return fields that required multiple API calls before. Delegated administrators can now view backup job details across their organization. Backup jobs APIs include retention settings, vault lock status, encryption details, and backup plan information like plan names, rule names, and schedules. Copy job APIs return destination vault configurations, vault type, lock state, and encryption settings. Restore job APIs show source resource details and vault access policies. Backup Audit Manager reports include new columns with vault type, lock status, encryption details, archive settings, and retention periods. You can use this information to enhance audit trails and verify compliance with data protection policies. These expanded information fields are available today in all AWS Regions where AWS Backup and AWS Backup Audit Manager are supported, with no additional charges. To learn more about AWS Backup Audit Manager, visit the product page and documentation. To get started, visit the AWS Backup console.

AWS Backup now supports Amazon FSx Intelligent-Tiering, a storage class which delivers fully elastic file storage that automatically scales up and down with your workloads. The FSx Intelligent-Tiering storage class is available for FSx for Lustre and Amazon FSx for OpenZFS file systems and combines performance, pay-for-what-you-use elasticity, with automated cost optimization in a single solution. With this integration, you can now protect OpenZFS and Lustre file systems using FSx Intelligent-Tiering through AWS Backup's centralized backup management capabilities. Customers with existing backup plans for Amazon FSx do not need to make any changes, as all scheduled backups will continue to work as expected. AWS Backup support is available in all AWS Regons where FSx Intelligent Tiering is available. For a full list of supported Regions see region availability documentation for https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/available-aws-regions.html and https://docs.aws.amazon.com/fsx/latest/LustreGuide/using-fsx-lustre.html#persistent-deployment-regions. To learn more about AWS Backup for Amazon FSx, visit the AWS Backup https://aws.amazon.com/backup/, https://docs.aws.amazon.com/aws-backup/latest/devguide/working-with-supported-services.html#working-with-fsx, and https://aws.amazon.com/backup/pricing/. For more information on the AWS Backup features available across AWS Regions, see https://docs.aws.amazon.com/aws-backup/latest/devguide/whatisbackup.html#features-by-region. To get started, visit the https://console.aws.amazon.com/backup.

AWS Backup now provides schedule preview for backup plans, helping you validate when your backups are scheduled to run. Schedule preview shows the next ten scheduled backup runs, including when continuous backup, indexing, or copy settings take effect. Backup plan schedule preview consolidates all backup rules into a single timeline, showing how they work together. You can see when each backup occurs across all backup rules, along with settings like lifecycle to cold storage, point-in-time recovery, and indexing. This unified view helps you quickly identify and resolve conflicts or gaps between your backup strategy and actual configuration. Backup plan schedule preview is available in all AWS Regions where https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-feature-availability.html. You can start using this feature automatically from the http://console.aws.amazon.com/backup API, or CLI without any additional settings. For more information, visit our . 

AWS Backup now provides more details in backup job API responses and Backup Audit Manager reports to give you better visibility into backup configurations and compliance settings. You can verify your backup policies with a single API call. List and Describe APIs for backup, copy, and restore jobs now return fields that required multiple API calls before. Delegated administrators can now view backup job details across their organization. Backup jobs APIs include retention settings, vault lock status, encryption details, and backup plan information like plan names, rule names, and schedules. Copy job APIs return destination vault configurations, vault type, lock state, and encryption settings. Restore job APIs show source resource details and vault access policies. Backup Audit Manager reports include new columns with vault type, lock status, encryption details, archive settings, and retention periods. You can use this information to enhance audit trails and verify compliance with data protection policies. These expanded information fields are available today in all AWS Regions where AWS Backup and AWS Backup Audit Manager https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-feature-availability.html#features-by-region, with no additional charges. To learn more about AWS Backup Audit Manager, visit the https://aws.amazon.com/backup/ and https://docs.aws.amazon.com/aws-backup/latest/devguide/aws-backup-audit-manager.html. To get started, visit the https://console.aws.amazon.com/backup.

AWS Backup now provides schedule preview for backup plans, helping you validate when your backups are scheduled to run. Schedule preview shows the next ten scheduled backup runs, including when continuous backup, indexing, or copy settings take effect. Backup plan schedule preview consolidates all backup rules into a single timeline, showing how they work together. You can see when each backup occurs across all backup rules, along with settings like lifecycle to cold storage, point-in-time recovery, and indexing. This unified view helps you quickly identify and resolve conflicts or gaps between your backup strategy and actual configuration. Backup plan schedule preview is available in all AWS Regions where AWS Backup is available. You can start using this feature automatically from the AWS Backup console, API, or CLI without any additional settings. For more information, visit our documentation.

AWS Backup now lets you choose whether to include Access Control Lists (ACLs) and ObjectTags when backing up your Amazon S3 buckets. Previously, AWS Backup included these metadata components for all objects by default. This new capability lets you customize your backup approach based on your recovery needs, so you can include only the metadata you need. This capability is available in all AWS Regions where AWS Backup for Amazon S3 is available. For pricing and regional availability information, see the https://aws.amazon.com/backup/pricing/. To learn more about AWS Backup for Amazon S3, visit the https://aws.amazon.com/backup/faqs/ and https://docs.aws.amazon.com/aws-backup/latest/devguide/s3-backups.html. To get started, visit the https://console.aws.amazon.com/backup. 

AWS Backup now offers enhanced Amazon EC2 restore capability that allows you to customize volume configurations during the restoration process. This new feature enables users to specify custom settings for all the attached Amazon EBS volumes to an EC2 AMI, including volume type, size, IOPS, AWS KMS encryption keys and others, directly through AWS Backup. The capability works seamlessly for restores from standard backup vaults and logically air-gapped vaults. You can start using this feature through the AWS Backup CLI, or SDK. During EC2 backup restoration, you can now include a new section (block device mappings) in your restore metadata to configure Amazon EBS volume settings. You can also specify additional volumes in the block device mappings to attach when launching the instance. The enhancement applies to both existing and new EC2 backups and is available at no extra cost. AWS Backup support for enhanced EC2 restores is available in all commercial Regions, where AWS Backup is supported. To learn more about AWS Backup support for this feature, visit the AWS Backup product documentation.

AWS Backup now requires one-time password (OTP) verification when approvers vote on Multi-party approval actions for logically air-gapped vaults. When an approver votes on an Multi-party approval request, they must enter a six-digit code sent to their registered email address in AWS IAM Identity Center. This ensures that only verified approvers can authorize protected vault operations, adding an additional layer of security for approval teams. OTP verification applies automatically to all existing and new Multi-party approval sessions for logically air-gapped vaults at no additional charge, with no setup required. You can get started with AWS Backup using the AWS Backup console, SDKs, or CLI. Multi-party approval with OTP verification is available in all AWS Regions where logically air-gapped vaults are supported. To learn more, visit the documentation.

AWS Backup now offers cross-account management in the following AWS Regions: Asia Pacific (Taipei, Thailand, New Zealand) and Mexico (Central). This capability helps you manage and monitor backups across your AWS accounts using AWS Organizations. With cross-account management in AWS Backup, you can deploy organization-wide backup policies using your AWS Organizations management account or delegated administrator account. This helps maintain compliance across all organizational accounts while reducing management overhead. You can also monitor backup activity across all accounts in your organization from a single management account. For more information on the AWS Backup features available across AWS Regions, see https://docs.aws.amazon.com/aws-backup/latest/devguide/whatisbackup.html#features-by-region. To get started, visit the https://console.aws.amazon.com/backup.

AWS Backup now supports Amazon Elastic Kubernetes Service (EKS), providing a fully-managed, centralized solution for backing up EKS cluster state and persistent application data. You can now use AWS Backup to help protect your entire EKS environments through a centralized, policy-driven backup service. You now get comprehensive data protection capabilities through AWS Backup across your Amazon EKS Clusters, including automated scheduling, retention management, immutable vaults, cross-Region and cross-account copies. AWS Backup delivers a new an agent-free solution that works natively with AWS, replacing custom scripts or third-party tools to perform backups for each cluster. You can restore entire EKS clusters, specific namespaces, or individual persistent volumes. Use AWS Backup to protect your clusters for disaster recovery, to help meet your compliance requirements, or for additional protection before EKS cluster upgrades. AWS Backup for EKS is available in all AWS Regions where both AWS Backup and Amazon EKS are available. For the most up-to-date information on Regional availability, please refer to the https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-feature-availability.html#supported-services-by-region. To get started with AWS Backup for Amazon EKS, visit the https://us-east-2.console.aws.amazon.com/backup/home?, refer to the https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-aurora.html%20and, or read the https://aws.amazon.com/blogs/aws/secure-eks-clusters-with-the-new-support-for-amazon-eks-in-aws-backup. 

AWS Backup now supports logically air-gapped vaults as a primary backup target. You can assign a logically air-gapped vault as the primary target in backup plans, organization-wide policies, or on-demand backups. Previously, logically air-gapped vaults could only store copies of existing backups. This capability reduces storage costs for customers who want the security and recoverability benefits of logically air-gapped vaults. Organizations wanting those benefits can now back up directly to a logically air-gapped vault without storing multiple backups. Resource types that support full AWS Backup management back up directly to the specified air-gapped vault. For resource types without full management support, AWS Backup creates a temporary snapshot in a standard vault, copies it to the air-gapped vault, then removes the snapshot. This feature is available in all AWS Regions that support logically air-gapped vaults. To get started, select a logically air-gapped vault as your primary backup target in the AWS Backup console, API, or CLI. For more information, visit the AWS Backup product page and documentation.

Today, we are announcing the availability of AWS Backup in the Asia Pacific (Taipei) Region. AWS Backup is a fully-managed, policy-driven service that allows you to centrally automate data protection across multiple AWS services spanning compute, storage, and databases. Using AWS Backup, you can centrally create and manage backups of your application data, protect your data from inadvertent or malicious actions with immutable recovery points and vaults, and restore your data in the event of a data loss incident. You can get started with AWS Backup using the AWS Backup console, SDKs, or CLI by creating a data protection policy and then assigning AWS resources to it using tags or Resource IDs. For more information on the features available in the Asia Pacific (Taipei) Region, visit the AWS Backup product page and documentation. To learn about the Regional availability of AWS Backup, see the AWS Regional Services List.