#AWS Platform Configurations (Private Preview)

The backup and export service for AWS Platform Configurations supports protecting data in the following services: Amazon SQS, AWS IAM, AWS Key Management Service, AWS Lambda, AWS Route 53, AWS Secrets Manager, AWS Systems Manager, and AWS WAF. AWS Platform Configurations data recovery only supports exporting the supported data types.

Refer to the tables below for supported and unsupported object types you can protect in the AWS Platform Configurations service.

#AWS IAM

Object Types	Backup	Export
User groups > Users	Supported	Supported
User groups > Permissions	Supported	Supported
Users > Permissions	Supported	Supported
Users > Groups	Supported	Supported
Users > Tags	Supported	Supported
Users > Security Credential	Unsupported	Unsupported
Role > Permission	Supported	Supported
Role > Trust relationships	Supported	Supported
Role > Tags	Supported	Supported
Policies > Permissions (versions of permission)	Supported	Supported
Policies > Entities attached	Supported	Supported
Policies > Tags	Supported	Supported

#AWS Key Management Service

Object Types	Backup	Export
Customer managed key > Aliases	Supported	Supported
Customer managed key > KeyID	Supported	Supported
Customer managed key > Status	Supported	Supported
Customer managed key > Creation Date	Supported	Supported
Customer managed key > Expiration Date	Supported	Supported
Customer managed key > Origin	Supported	Supported
Customer managed key > Custom key store ID	Supported	Supported
Customer managed key > Regionality	Supported	Supported
Customer managed key > Key type	Supported	Supported
Customer managed key > Key spec	Supported	Supported
Customer managed key > Key usage	Supported	Supported
Customer managed key > Description	Supported	Supported
Customer managed key > ARN	Supported	Supported
Customer managed key > Scheduled deletion date	Supported	Supported
Customer managed key > Custom key store Name	Supported	Supported
Customer managed key > Custom key store type	Supported	Supported
Customer managed key > Connection state	Supported	Supported
Customer managed key > External key ID	Supported	Supported
Customer managed key > Tag	Supported	Supported
Customer managed key > Key policy (JSON)	Supported	Supported
Customer managed key > Key agreement algorithms	Supported	Supported
Customer managed key > Signing algorithms	Supported	Supported
Customer managed key > MAC algorithms	Supported	Supported
Customer managed key > Public key	Supported	Supported
Customer managed key > CloudHSM cluster ID	Supported	Supported
Customer managed key > Key rotation	Supported	Supported
Customer managed key > Key material	Supported	Supported
Customer managed key > On-demand key rotation	Supported	Supported
CloudHSM key stores > Custom key store name	Supported	Supported
CloudHSM key stores > Custom key store ID	Supported	Supported
CloudHSM key stores > CloudHSM cluster ID	Supported	Supported
CloudHSM key stores > Connection state	Supported	Supported
CloudHSM key stores > Number of HSMs	Supported	Supported
External key stores > Custom key store name	Supported	Supported
External key stores > Custom key store ID	Supported	Supported
External key stores > Proxy connectivity	Supported	Supported
External key stores > Connection state	Supported	Supported
External key stores > Creation date	Supported	Supported
External key stores > Custom key store type	Supported	Supported
External key stores > Proxy URI path	Supported	Supported
External key stores > Proxy credential: Access key ID	Supported	Supported
External key stores > Proxy URI endpoint	Supported	Supported

#AWS Lambda

Object Types	Backup	Export
Function > Code Source	Supported	Supported
Function > Test	Unsupported	Unsupported
Function > Function Overview	Supported	Supported
Function > Monitor	Unsupported	Unsupported
Function > Configuration	Supported	Supported
Function > Aliases	Supported	Supported
Function > Version	Unsupported	Unsupported
AWS Layer > Created	Supported	Supported
AWS Layer > Compatible architectures	Supported	Supported
AWS Layer > License	Supported	Supported
AWS Layer > Description	Supported	Supported
AWS Layer > Compatible runtimes	Supported	Supported
AWS Layer > Download file	Supported	Supported
AWS Layer > All Versions	Unsupported	Unsupported
AWS Layer > Function using Layer	Supported	Supported
Code signing configurations	Supported	Supported
Code signing configurations > Description	Supported	Supported
Code signing configurations > Signature validation policy	Supported	Supported
Code signing configurations > Last modified	Supported	Supported
Code signing configurations > Tags	Supported	Supported
Code signing configurations > Function Using	Supported	Supported

#AWS Route 53

Object Types	Backup	Export
AWS Registered Domains > Domain name	Supported	Supported
AWS Registered Domains > Expiration date	Supported	Supported
AWS Registered Domains > Auto-renew	Supported	Supported
AWS Registered Domains > Transfer lock	Supported	Supported
AWS Registered Domains > Name servers	Supported	Supported
AWS Registered Domains > Registration date	Supported	Supported
AWS Registered Domains > Expiration date	Supported	Supported
AWS Registered Domains > Contact information	Supported	Supported
AWS Registered Domains > DNSSEC keys	Supported	Supported
AWS Registered Domains > Tags	Supported	Supported
AWS Registered Domains > Routing policy	Supported	Supported
AWS hosted zone > Hosted zone name	Unsupported	Unsupported
AWS hosted zone > Created by	Supported	Supported
AWS hosted zone > Record count	Supported	Supported
AWS hosted zone > Description	Supported	Supported
AWS hosted zone > Hosted zone ID	Supported	Supported
AWS hosted zone > Records	Supported	Supported
AWS hosted zone > DNSSEC signing	Supported	Supported
AWS hosted zone > Tags	Supported	Supported
AWS hosted zone > Query log	Supported	Supported
AWS CIDR Collections > Type	Supported	Supported
AWS CIDR Collections > Name servers	Supported	Supported
AWS CIDR Collections > Collection name	Supported	Supported
AWS CIDR Collections > ARN	Supported	Supported
AWS Traffic Flow > CIDR Location	Supported	Supported
AWS Traffic Flow > CIDR Blocks	Supported	Supported
AWS Traffic Flow > Name	Supported	Supported
AWS Traffic Flow > DNS type	Supported	Supported
AWS Traffic Flow > Version descriptions	Supported	Supported
AWS Traffic Flow > Policy records	Supported	Supported
AWS Traffic Flow > Number of policy records	Supported	Supported

#AWS Systems Manager

Object Types	Backup	Export
Parameter Store > Name	Supported	Supported
Parameter Store > Tier	Supported	Supported
Parameter Store > Type	Supported	Supported
Parameter Store > Last modified	Supported	Supported
Parameter Store > Description	Supported	Supported
Parameter Store > Data type	Supported	Supported
Parameter Store > Last modified user	Supported	Supported
Parameter Store > ARN	Supported	Supported
Parameter Store > Value	Supported	Supported
Parameter Store > Version	Supported	Supported
Parameter Store > History	Supported	Supported
Parameter Store > Tag	Supported	Supported

#AWS WAF

Object Types	Backup	Export
IP Set > Name	Supported	Supported
IP Set > Description	Supported	Supported
IP Set > Region	Supported	Supported
IP Set > IP Version	Supported	Supported
IP Set > IP address	Supported	Supported
Regex Pattern Set > Name	Supported	Supported
Regex Pattern Set > Description	Supported	Supported
Regex Pattern Set > Region	Supported	Supported
Regex Pattern Set > Regex patterns	Supported	Supported
Rule Group > Name	Supported	Supported
Rule Group > Labels	Supported	Supported
Rule Group > Description	Supported	Supported
Rule Group > Capacity	Supported	Supported
Rule Group > Used Capacity	Supported	Supported
Rule Group > Region	Supported	Supported
Rule Group > Rules	Supported	Supported
WebACL > Traffic Overview	Unsupported	Unsupported
WebACL > Rules	Supported	Supported
WebACL > Associated AWS resources	Supported	Supported
WebACL > Custom response bodies	Supported	Supported
WebACL > Logging and metric	Supported	Supported
WebACL > Sampled requests	Unsupported	Unsupported
WebACL > CloudWatch Log Insights	Unsupported	Unsupported

#Amazon SQS

Object Types	Backup	Export
Queues > Name	Supported	Supported
Queues > Type	Supported	Supported
Queues > ARN	Supported	Supported
Queues > URL	Supported	Supported
Queues > Created date	Supported	Supported
Queues > Update date	Supported	Supported
Queues > Maximum message size	Supported	Supported
Queues > Message retention period	Supported	Supported
Queues > Default visibility timeout	Supported	Supported
Queues > Details	Supported	Supported
Queues > Queue policies	Supported	Supported
Queues > SNS subscriptions	Supported	Supported
Queues > Lambda trigger	Supported	Supported
Queues > EvenBridge pipes	Supported	Supported
Queues > Dead-letter queue	Supported	Supported
Queues > Tags	Supported	Supported
Queues > Encryption	Supported	Supported
Queues > Dead-letter queue redrive status	Supported	Supported

#AWS Secrets Manager

Object Types	Backup	Export
Secrets > Encryption key	Supported	Supported
Secrets > Secret name	Supported	Supported
Secrets > Secret description	Supported	Supported
Secrets > Secret ARN	Supported	Supported
Secrets > Description	Supported	Supported
Secrets > Created date	Supported	Supported
Secrets > Secret value	Supported	Supported
Secrets > Resource permissions	Supported	Supported
Secrets > Rotation	Supported	Supported
Secrets > Version	Supported	Supported
Secrets > Replication	Supported	Supported
Secrets > Tags	Supported	Supported
Secrets > Region	Supported	Supported
Secrets > Rotation Lambda ARN	Supported	Supported
Secrets > Next rotation date	Supported	Supported
Secrets > Last accessed date	Supported	Supported
Secrets > Last changed date	Supported	Supported
Secrets > Deleted date	Supported	Supported
Secrets > Owning service	Supported	Supported