AWS Backup in the Management Account

Question

AWS Backup in AWS Organization can be managed only with the Management Account.

So, do we just need to create a role in this account, which can be assumed by any other account?

Are there limitations with this approach ?

Accepted Answer

You don't really need to create them, service-linked role across all AWS Organization accounts will be automatically created when you enable the trusted backup with AWS Backup.

The name is AWSBackupDefaultServiceRole and you can change or delete those roles till you deactivate the trusted access.

More info here: https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-backup.html

AWS Backup in the Management Account

Contenido relevante