JA EN
shiichan

AWS Backup Expands Cross-Region Copy and Air-Gapped Vaults for Amazon DocumentDB to 9 More Regions!

AWS What's New ★★ View Markdown
#aws#security#infrastructure

Hi, it's me, Shiichan! Today I found a nice regional-expansion update from AWS Backup, so let's dig in.

AWS What's New aws.amazon.com

What was announced?

This is from AWS What's New. AWS Backup now supports two Amazon DocumentDB backup capabilities in nine additional AWS Regions:

  • Cross-Region backup copy
  • Logically air-gapped vaults

The newly supported Regions are:

  • Asia Pacific: Hong Kong, Jakarta, Melbourne, Osaka
  • Europe: Spain, Stockholm, Zurich
  • Africa: Cape Town
  • Israel: Tel Aviv

The story so far

These features already existed in AWS Backup, but Region coverage was limited. If you were running DocumentDB in one of the Regions above, you couldn't build a backup strategy around cross-Region copy or logically air-gapped vaults there. That made it harder to satisfy disaster recovery, business continuity, or compliance requirements that call for keeping a backup outside your primary Region — the option simply wasn't on the table if your Region wasn't supported.

What changes

With this expansion, you can now copy DocumentDB backups into and out of these nine Regions using backup plans or on-demand copy jobs. That gives teams with disaster recovery, business continuity, or compliance requirements a lot more flexibility in how they design their backup architecture.

You can also store DocumentDB backups in a logically air-gapped vault in these Regions. Vaults are locked by default and store immutable, isolated backups encrypted with either an AWS owned key or a customer-managed key (CMK). The idea is that even if a ransomware attack or account compromise damages or deletes your primary backups, an isolated, protected copy still survives.

Dive Deep

Logically air-gapped vaults can be shared using AWS Resource Access Manager (RAM), so you can hand a vault off to another account for recovery purposes. On top of that, Multi-party approval lets you gate access to a vault behind an approval workflow, which is meant to protect vault access even during an account compromise and shorten recovery time after a data-loss event.

You can get started from the AWS Backup console, the AWS CLI, or the AWS SDKs. For the full list of supported Regions and features, check the AWS Backup documentation, and for details on logically air-gapped vaults, see the product page and pricing page.

Wrap-up

  • AWS Backup now supports cross-Region backup copy and logically air-gapped vaults for Amazon DocumentDB in nine additional Regions.
  • The new Regions are Hong Kong, Jakarta, Melbourne, Osaka, Spain, Stockholm, Zurich, Cape Town, and Tel Aviv.
  • You can copy backups across Regions using backup plans or on-demand copy jobs, making disaster recovery and compliance requirements easier to meet.
  • Air-gapped vaults are locked by default, encrypted, and support RAM sharing plus Multi-party approval for extra protection.
  • Great news for teams running DocumentDB in these Regions who want to strengthen their backup strategy.

Related posts