AWS Backup for S3 adds direct read-only access to backup data
AWS Backup for Amazon S3 now supports S3 Access Points, allowing direct read-only access to backup data via standard S3 APIs without a full restore. This feature streamlines targeted recovery, validation, auditing, and investigation for engineers and architects managing S3 backups. The capability is available in select AWS Regions and works with various recovery point types and vault configurations.
- →Direct read-only access to S3 backup data via Access Points
- →Access Points support snapshot and continuous recovery points
- →Recovery points with active access points are protected from deletion
- →Capability available via console, API, or CLI in select regions
Features (1) ›
- Direct read-only access to S3 backup data via Access Points
AWS Backup for Amazon S3 now supports creating S3 Access Points, which provide immediate read-only access to backup data using standard S3 APIs without initiating a restore. This enables targeted file recovery, data validation, compliance auditing, and forensic investigation.
Enhancements (1) ›
- Access Points support snapshot and continuous recovery points
Access points work with both snapshot and continuous (point-in-time) recovery points stored in standard or logically air-gapped vaults. They also support recovery points shared across accounts via AWS Resource Access Manager or Multi-party approval.
Notes (2) ›
- Recovery points with active access points are protected from deletion
While an access point is active for a recovery point, that recovery point is protected from deletion, adding an extra layer of protection for critical backups.
- Capability available via console, API, or CLI in select regions
Users can get started by creating access points for S3 recovery points using the AWS Backup console, API, or CLI. This new capability is available in select AWS Regions.
https://aws.amazon.com/about-aws/whats-new/2026/08/aws-backup-amazon-s3-direct-access/
Related releases
- Amazon S3 enhances access denied errors with specific policy ARNs AWS What's New ·
- AWS Clean Rooms now supports exporting privacy-enhanced analysis logs for SQL queries AWS What's New ·
- AWS Security Blog Details How to Secure S3 Buckets AWS Security Blog ·
- AWS Glue integrates with SageMaker Unified Studio for one-click data access AWS What's New ·
- Amazon MSK adds authorizer log delivery for provisioned clusters AWS What's New ·
- Amazon RDS shows storage volume initialization status AWS What's New ·