Monitoring AWS Backup events using EventBridge - AWS Backup

Monitoring AWS Backup events using EventBridge

Monitor events using EventBridge

You can use EventBridge to monitor AWS Backup events. A common use case is to receive an alarm when a backup job fails. AWS Backup emits events to EventBridge in a best-effort manner every 5 minutes.

The purpose of this documentation page is to provide you with the reference materials to use EventBridge to monitor AWS Backup. For how to track events using EventBridge, see Configure AWS Backup events to send to EventBridge at the halfway mark of blog Amazon CloudWatch Events and Metrics for AWS Backup or Creating a rule for an AWS service in the Amazon EventBridge User Guide.

Note

Some events report status: COMPLETED whereas other events report state: COMPLETED. This is consistent with the AWS Backup API.

You can track the following AWS Backup-related events in EventBridge.

Event type States Event details
Backup Job State Change ABORTED, COMPLETED, FAILED, EXPIRED, RUNNING, PENDING

accountId, resources: recoveryPointArn, details, backupJobId, backupSizeInBytes, backupVaultName, backupVaultArn, bytesTransferred, completionDate, expectedCompletionDate, iAmRoleArn, percentDone, resourceArn, resourceType, startBy, state, statusMessage

createdBy: backupPlanArn, createdBy: backupPlanId, createdBy: backupPlanVersion, createdBy: backupRuleId

Backup Job State Change CREATED

accountId, resources: recoveryPointArn, details, backupJobId, state, creationDate

Copy Job State Change COMPLETED, FAILED, RUNNING

accountId, resources: recoveryPointArn, details, backupSizeInBytes, completionDate, copyJobId, creationDate, destinationBackupVaultArn, destinationRecoveryPointArn, iAmRoleArn, resourceArn, resourceType, state, statusMessage

createdBy: backupPlanArn, createdBy: backupPlanId, createdBy: backupPlanVersion, createdBy: backupRuleId

Copy Job State Change CREATED

accountId, resources: recoveryPointArn, details, state, creationDate, sourceBackupVaultArn, destinationBackupVaultArn

Restore Job State Change CREATED, COMPLETED, FAILED, PENDING, RUNNING accountId, resources: recoveryPointArn, details, state, creationDate, restoreJobId
Recovery Point State Change COMPLETED, PARTIAL, EXPIRED

accountId, resources: recoveryPointArn, resources: backupVaultArn, details, backupSizeInBytes, backupVaultName, calculatedLifeCycle: deleteAt, calculatedLifeCycle:moveToColdStorageAt, completionDate, creationDate, encryptionKeyArn, iAmRoleArn, isEncrypted, lastRestoreTime, lifecycle: deleteAfterDays, lifecycle:moveToColdStorageAfterDays, resourceArn, resourceType, status, storageClass

createdBy: backupPlanArn, createdBy: backupPlanId, createdBy: backupPlanVersion, createdBy: backupRuleId

Restore Job State Change CREATED

accountId, resources: recoveryPointArn, details, state, creationDate, restoreJobId

Recovery Point State Change FAILED, COMPLETED, RUNNING, ABORTED, PENDING

accountId, resources: recoveryPointArn, details, backupSizeInBytes, completionDate, createdResourceArn, creationDate, expectedCompletionTimeMinutes, iAmRoleArn, percentDone, restoreJobId, status, statusMessage

Recovery Point State Change MODIFIED, DELETED

accountId, resources: recoveryPointArn, resources: backupVaultArn, details, lifecycle, calculatedLifecycle, state

Backup Vault State Change CREATED, DELETED, MODIFIED accountId, resources: backupVaultArn, details, backupVaultName, state
Region Settings State Change MODIFIED accountId, details, modifiedAt, state, resourceTypeOptInPreference
Recovery Point State Change MODIFIED, DELETED accountId, resources: RecoveryPointArn, resources: backupVaultArn, details, lifecycle, calculatedLifecycle, state
Backup Plan State Change CREATED, DELETED, MODIFIED accountId, resources: backupPlanArn, details, backupPlanId, versionId, creationDate, deletionDate

Use these sample JSON payloads if you would like to use these events programmatically.

Event state JSON payload

Backup Job: FAILED

{ "version": "0", "id": "710b0398-d48e-f3c3-afca-cfeb2fdaa656", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T20:15:26Z", "region": "us-east-1", "resources": [], "detail": { "backupJobId": "34176239-e96d-4e1d-9fad-529dbb3c3556", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86_beta", "backupVaultName": "9ab3e749-82c6-4342-9320-5edbf4918b86_beta", "bytesTransferred": "0", "creationDate": "2020-07-29T20:13:07.392Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupIntegTestRole", "resourceArn": "arn:aws:cryo-mock:us-west-2:1112233445566:resource:dummy-fs-1", "resourceType": "CryoTestClient", "state": "FAILED", "statusMessage": "\"Backup job failed because backup vault arn:aws:backup:us-west-2:1112233445566:backup-vault:9ab3e749-82c6-4342-9320-5edbf4918b86_beta does not exist.\"", "startBy": "2020-07-30T04:13:07.392Z", "percentDone": 0 } }

Backup Job: COMPLETED

{ "version": "0", "id": "dafac799-9b88-0134-26b7-fef4d54a134f", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T21:41:17Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:f1d966fe-a3bd-410b-b292-99f442d13b56_beta" ], "detail": { "backupJobId": "a827233a-d405-4a86-a440-759fa94f34dd", "backupSizeInBytes": "36048", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:9732c1b4-1091-472a-9d9f-52e0565ee39a_beta", "backupVaultName": "9732c1b4-1091-472a-9d9f-52e0565ee39a_beta", "bytesTransferred": "36048", "creationDate": "2020-07-15T21:40:31.207Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupIntegTestRole", "resourceArn": "arn:aws:cryo-mock:us-west-2:1112233445566:resource:dummy-fs-1", "resourceType": "CryoTestClient", "state": "COMPLETED", "completionDate": "2020-07-15T21:41:05.921Z", "startBy": "2020-07-16T05:40:31.207Z", "percentDone": 100 } }

Backup Job: RUNNING

{ "version": "0", "id": "44946c39-b519-3505-44e6-ba74afeb2e30", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T21:39:13Z", "region": "us-east-1", "resources": [], "detail": { "backupJobId": "B6EC38D2-CB3C-EF0A-F5A4-3CF324EF4945", "backupSizeInBytes": "3221225472", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:e6625738-0655-4aa9-bd37-6ec1dd183b15_beta", "backupVaultName": "e6625738-0655-4aa9-bd37-6ec1dd183b15_beta", "bytesTransferred": "0", "creationDate": "2020-07-15T21:38:31.152Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/FullBackupIntegTestRole", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:volume/vol-0b5ae24f2ee72d926", "resourceType": "EBS", "state": "RUNNING", "startBy": "2020-07-16T05:00:00Z", "expectedCompletionDate": "Jul 15, 2020 9:39:07 PM", "percentDone": 99, "createdBy": { "backupPlanId": "bde0f455-4e24-4668-aeaa-4932a97f5cc5", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:bde0f455-4e24-4668-aeaa-4932a97f5cc5_beta", "backupPlanVersion": "YTkzNmM0MmUtMWRhNS00Y2RkLThmZGUtNjA5NTc4NGM1YTc5", "backupPlanRuleId": "1f97bafa-14d6-4f39-94fd-94b51bd6d0d5" } } }

Backup Job: ABORTED

{ "version": "0", "id": "4c91ceb0-b798-da82-6818-c29b3dce7543", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T21:33:16Z", "region": "us-east-1", "resources": [], "detail": { "backupJobId": "58cdef95-7680-4c74-80d5-1b64093999c8", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:f59bffcd-2538-4bbe-8343-1c60dae27c27_beta", "backupVaultName": "f59bffcd-2538-4bbe-8343-1c60dae27c27_beta", "bytesTransferred": "0", "creationDate": "2020-07-15T21:33:00.803Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupIntegTestRole", "resourceArn": "arn:aws:cryo-mock:us-west-2:1112233445566:resource:dummy-fs-1", "resourceType": "CryoTestClient", "state": "ABORTED", "statusMessage": "\"Backup job was stopped by user.\"", "completionDate": "2020-07-15T21:33:01.621Z", "startBy": "2020-07-16T05:33:00.803Z", "percentDone": 0 } }

Backup Job: EXPIRED

{ "version": "0", "id": "1d7bbc04-6120-1145-13b9-49b0af465328", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T13:04:57Z", "region": "us-east-1", "resources": [], "detail": { "backupJobId": "01EE26DC-7107-4D8E-0C54-EAC27C662BA4", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:aws/backup/AutomatedBackupVaultDel2_beta", "backupVaultName": "aws/backup/AutomatedBackupVaultDel2_beta", "bytesTransferred": "0", "creationDate": "2020-07-29T05:10:20.077Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupIntegTestRole", "resourceArn": "arn:aws:cryo-mock:us-west-2:1112233445566:resource.bbd99e4c-e974-489b-94f2-db9e8cc15dd5", "resourceType": "CryoTestClient", "state": "EXPIRED", "statusMessage": "\"Backup job failed because there was a running job for the same resource.\"", "completionDate": "2020-07-29T13:02:15.234Z", "startBy": "2020-07-29T13:00:00Z", "percentDone": 0, "createdBy": { "backupPlanId": "aws/efs/414a5bd4-f880-47ad-95f3-f085108a4c3b", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:aws/efs/414a5bd4-f880-47ad-95f3-f085108a4c3b_beta", "backupPlanVersion": "NjBjOTUzZjYtYzZiNi00NjhlLWIzMTEtNWRjOWY0YTNjN2Vj", "backupPlanRuleId": "3eb0017c-f262-4211-a802-302cebb11dc2" } } }

Backup Job: PENDING

{ "version": "0", "id": "64dd1897-f863-31a3-9ee5-b05e306d81ff", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T20:03:30Z", "region": "us-east-1", "resources": [], "detail": { "backupJobId": "2cffdb68-d6ed-485f-9f9b-8b530749f1c2", "backupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:ed1f2661-5587-48bf-8a98-fadb977bf975_beta", "backupVaultName": "ed1f2661-5587-48bf-8a98-fadb977bf975_beta", "bytesTransferred": "0", "creationDate": "2020-07-29T20:01:06.224Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupIntegTestRole", "resourceArn": "arn:aws:cryo-mock:us-west-2:1112233445566:resource:testListProtectedResources-3", "resourceType": "CryoTestClient", "state": "PENDING", "statusMessage": "", "startBy": "2020-07-30T04:01:06.224Z", "percentDone": 0 } }

Backup Job: CREATED

{ "version": "0", "id": "29af2bf2-eace-58ab-da3a-8c0bf738d692", "detail-type": "Backup Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-22T20:32:53Z", "region": "us-east-1", "resources": [], "detail": { "backupJobId": "7e8845b5-ca30-415f-a842-e0152bf4d0ca", "state": "CREATED", "creationDate": "2020-06-22T20:32:47.466Z" } }
Copy Job: FAILED
{ "version": "0", "id": "4660bc92-a44d-c939-4542-cda503f14855", "detail-type": "Copy Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T20:37:34Z", "region": "us-east-1", "resources": [ "arn:aws:ec2:us-west-2::image/ami-00179b33a7a88cac5" ], "detail": { "copyJobId": "47C8EF56-74D8-059D-1301-C5BE1D5C926E", "backupSizeInBytes": 22548578304, "creationDate": "2020-07-15T20:36:13.239Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/RoleForEc2BackupWithNoDescribeTagsPermissions", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:instance/i-0515aee7de03f58e1", "resourceType": "EC2", "sourceBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:55aa945e-c46a-421b-aa27-f94b074e31b7_beta", "state": "FAILED", "statusMessage": "Access denied exception while trying to list tags", "completionDate": "2020-07-15T20:37:28.704Z", "destinationBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:55aa945e-c46a-421b-aa27-f94b074e31b7_beta", "destinationRecoveryPointArn": {} } }
Copy Job: RUNNING
{ "version": "0", "id": "d17480ae-7042-edb2-0ff5-8b94822c58e4", "detail-type": "Copy Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T22:07:48Z", "region": "us-east-1", "resources": [ "arn:aws:ec2:us-west-2::snapshot/snap-03886bc8d6ef3a1f9" ], "detail": { "copyJobId": "0175DE71-5784-589F-D8AC-541ACCB4CAC8", "backupSizeInBytes": 3221225472, "creationDate": "2020-07-15T22:06:27.234Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/OrganizationCanaryTestRole", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:volume/vol-050eba21ee4d3c001", "resourceType": "EBS", "sourceBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:846869de-4589-45c3-ab60-4fbbabcdd3ec_beta", "state": "RUNNING", "destinationBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:846869de-4589-45c3-ab60-4fbbabcdd3ec_beta", "destinationRecoveryPointArn": {}, "createdBy": { "backupPlanId": "b58e3621-1c53-4997-ad8a-afc3347a850e", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:b58e3621-1c53-4997-ad8a-afc3347a850e_beta", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupPlanRuleId": "78e356d3-1a11-4f61-8585-af5d6b69bb18" } } }
Copy Job: COMPLETED
{ "version": "0", "id": "47deb974-6473-aef1-56c2-52c3eaedfceb", "detail-type": "Copy Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T22:08:04Z", "region": "us-east-1", "resources": [ "arn:aws:ec2:us-west-2::snapshot/snap-03886bc8d6ef3a1f9" ], "detail": { "copyJobId": "0175DE71-5784-589F-D8AC-541ACCB4CAC8", "backupSizeInBytes": 3221225472, "creationDate": "2020-07-15T22:06:27.234Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/OrganizationCanaryTestRole", "resourceArn": "arn:aws:ec2:us-west-2:1112233445566:volume/vol-050eba21ee4d3c001", "resourceType": "EBS", "sourceBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:846869de-4589-45c3-ab60-4fbbabcdd3ec_beta", "state": "COMPLETED", "completionDate": "2020-07-15T22:07:58.111Z", "destinationBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:846869de-4589-45c3-ab60-4fbbabcdd3ec_beta", "destinationRecoveryPointArn": { "value": "arn:aws:ec2:us-west-2::snapshot/snap-0726fe70935586180" }, "createdBy": { "backupPlanId": "b58e3621-1c53-4997-ad8a-afc3347a850e", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:b58e3621-1c53-4997-ad8a-afc3347a850e_beta", "backupPlanVersion": "Mjc4ZTRhMzUtMGE5Ni00NmQ5LWE1YmMtOWMwY2IwMTY4NWQ4", "backupPlanRuleId": "78e356d3-1a11-4f61-8585-af5d6b69bb18" } } }
Copy Job: CREATED
{{ "version": "0", "id": "8398a4c4-8fe8-2b49-a4b9-fd4fdcd34a4e", "detail-type": "Copy Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-22T21:06:32Z", "region": "us-east-1", "resources": [ "arn:aws:ec2:us-west-2::image/ami-0888b126e2170b98e" ], "detail": { "creationDate": "2020-06-22T21:06:25.754Z", "state": "CREATED", "sourceBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:ef09da5a-21a6-461f-a98f-857e9e621a17_beta", "destinationBackupVaultArn": "arn:aws:backup:us-west-2:1112233445566:backup-vault:ef09da5a-21a6-461f-a98f-857e9e621a17_beta" } }
Restore Job: FAILED
{ "version": "0", "id": "296805cc-6ad4-32f2-fb86-4e66c84abce7", "detail-type": "Restore Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T20:19:29Z", "region": "us-east-1", "resources": [ "arn:aws:ec2:us-west-2::image/ami-06b9894dfb1f9cf48" ], "detail": { "restoreJobId": "9B333A28-526B-01CD-4A77-9785A08922FD", "backupSizeInBytes": "22548578304", "creationDate": "2020-07-15T20:19:07.303Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/CanaryAWSBackupRole", "percentDone": 0, "resourceType": "EC2", "status": "FAILED", "statusMessage": "AWS Backup does not permit attaching a new instance profile to an EC2 instance. Please restore using the backed up instance profile." } }
Restore Job: RUNNING
{ "version": "0", "id": "6137a1f0-33f3-99ee-a01a-3d8b96fe2ad6", "detail-type": "Restore Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T20:26:06Z", "region": "us-east-1", "resources": [ "arn:aws:ec2:us-west-2::snapshot/snap-0fe679ca138cfad2c" ], "detail": { "restoreJobId": "F143178C-A866-4782-3B19-BF776A1A790C", "backupSizeInBytes": "3221225472", "creationDate": "2020-07-29T20:26:00.098Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/OrganizationCanaryTestRole", "percentDone": 0, "resourceType": "EBS", "status": "RUNNING" } }
Restore Job: COMPLETED
{ "version": "0", "id": "8939bc73-dcf1-418c-9420-b9c5e097f0fb", "detail-type": "Restore Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T03:14:58Z", "region": "us-east-1", "resources": [ "arn:aws:rds:us-west-2:1112233445566:snapshot:awsbackup:job-f2494617-4fe0-47e3-969e-a652d902b475" ], "detail": { "restoreJobId": "EF332640-02A5-5978-693F-987970F09961", "backupSizeInBytes": "0", "creationDate": "2020-07-15T03:10:01.742Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/CanaryAWSBackupRole", "percentDone": 0, "resourceType": "RDS", "status": "COMPLETED", "createdResourceArn": "arn:aws:rds:us-west-2:1112233445566:db:cryo-instance7c3d1e78-987e-4450-92e1-3b6dbedb5384", "completionDate": "2020-07-15T03:14:53.128Z" } }
Restore Job: PENDING
{ "version": "0", "id": "0586085f-3079-cd79-10b7-908d3c3a21ea", "detail-type": "Restore Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T20:08:26Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:42bb8260-92cd-46a2-ab8d-b29f4edb47b1_beta" ], "detail": { "restoreJobId": "EB9CE5CB-2B92-8B66-FD16-9829F4DAAAD7", "backupSizeInBytes": "36048", "creationDate": "2020-07-29T20:08:21.083Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/MockRCBackupIntegTestRole", "percentDone": 0, "resourceType": "CryoTestClient", "status": "PENDING" } }
Restore Job: CREATED
{ "version": "0", "id": "af32977e-378f-2122-f985-fca4596f0709", "detail-type": "Restore Job State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-22T18:50:49Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:recovery-point:f6560d33-3660-494e-8d47-aaba939df32e_beta" ], "detail": { "restoreJobId": "267EA62F-C125-EFE5-7099-9D98FC0E422A", "creationDate": "2020-06-22T18:50:46.407Z", "state": "CREATED" } }
Recovery Point: COMPLETED
{ "version": "0", "id": "ec6f75cc-989c-faaf-a642-dd0f1c95bff0", "detail-type": "Recovery Point Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-15T21:39:07Z", "region": "us-east-1", "resources": [ "arn:aws:rds:us-west-2:1112233445566:cluster-snapshot:awsbackup:job-4ece7121-d60e-00c2-5c3b-49960142d03b" ], "detail": { "backupVaultName": "e6625738-0655-4aa9-bd37-6ec1dd183b15_beta", "backupVaultArn": "arn:aws:backup:us-west-2:496821122410:backup-vault:e6625738-0655-4aa9-bd37-6ec1dd183b15_beta", "creationDate": "2020-07-15T21:38:31.152Z", "iamRoleArn": "arn:aws:iam::1112233445566:role/FullBackupIntegTestRole", "resourceType": "Aurora", "resourceArn": "arn:aws:rds:us-west-2:1112233445566:cluster:cryo-aurora-14029f40-b0b6-4a61-9fd2-9886f2771add", "status": "COMPLETED", "isEncrypted": "false", "storageClass": "WARM", "completionDate": "2020-07-15T21:39:05.689Z", "createdBy": { "backupPlanId": "bde0f455-4e24-4668-aeaa-4932a97f5cc5", "backupPlanArn": "arn:aws:backup:us-west-2:1112233445566:backup-plan:bde0f455-4e24-4668-aeaa-4932a97f5cc5_beta", "backupPlanVersion": "YTkzNmM0MmUtMWRhNS00Y2RkLThmZGUtNjA5NTc4NGM1YTc5", "backupPlanRuleId": "1f97bafa-14d6-4f39-94fd-94b51bd6d0d5" }, "lifecycle": { "deleteAfterDays": 100 }, "calculatedLifeCycle": { "deleteAt": "2020-10-23T21:38:31.152Z" } } }
Recovery Point: DELETED
{ "version": "0", "id": "6089ee76-d856-0d7c-cee7-0a431cd43343", "detail-type": "Recovery Point Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-29T22:38:49Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-vault:157f892e-fe46-48da-9dbe-4154f91f8acc_beta", "arn:aws:rds:us-west-2:1112233445566:snapshot:awsbackup:job-c1a6d40a-32d1-4d54-bd70-bced933ef107" ], "detail": { "state": "DELETED", "lifecycle": { "deleteAfterDays": 300 }, "calculatedLifeCycle": { "deletedAt": "2021-05-25T22:29:02.452Z" } } }
Recovery Point: MODIFIED
{ "version": "0", "id": "14365bb1-adef-bc00-1ee3-8fac188d7996", "detail-type": "Recovery Point Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-07-02T23:33:57Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-vault:helo12312_beta", "arn:aws:dynamodb:us-west-2:1112233445566:table/test/backup/01593730512469-033578ce" ], "detail": { "calculatedLifeCycle": { "toColdStorageAfterDays": "Fri Dec 04 22:55:11 UTC 2020" }, "state": "MODIFIED" } }
Backup Vault: CREATED
{ "version": "0", "id": "d415609e-5f35-d9a2-76d1-613683e4e024", "detail-type": "Backup Vault State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T23:18:19Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-vault:d8864642-155c-4283-a168-a04f40e12c97_beta" ], "detail": { "backupVaultName": "d8864642-155c-4283-a168-a04f40e12c97", "state": "CREATED" } }
Backup Vault: DELETED
{ "version": "0", "id": "344bccc1-6d2e-da93-3adf-b3f82460294d", "detail-type": "Backup Vault State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-22T02:42:37Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-vault:e8189629-1f8e-4ed2-af7d-b32415d04db1_beta" ], "detail": { "backupVaultName": "e8189629-1f8e-4ed2-af7d-b32415d04db1", "state": "DELETED" } }
Backup Plan: MODIFIED
{ "version": "0", "id": "2895aefb-dd4a-0a23-6071-2652abd92c3f", "detail-type": "Backup Plan State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T23:18:25Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-plan:83fcb8ee-2d93-42ac-b06f-591563f3f8de_beta" ], "detail": { "backupPlanId": "83fcb8ee-2d93-42ac-b06f-591563f3f8de", "versionId": "NjIwNDFjMDEtNmZlNC00M2JmLTkzZDgtNzNkZjQyNzkxNDk0", "modifiedAt": "2020-06-24T23:18:19.168Z", "state": "MODIFIED" } }
Backup Plan: DELETED
{ "version": "0", "id": "33fc5c1d-6db2-b3d9-1e70-1c9a2c23645c", "detail-type": "Backup Plan State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T23:18:25Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-plan:83fcb8ee-2d93-42ac-b06f-591563f3f8de_beta" ], "detail": { "backupPlanId": "83fcb8ee-2d93-42ac-b06f-591563f3f8de", "versionId": "NjIwNDFjMDEtNmZlNC00M2JmLTkzZDgtNzNkZjQyNzkxNDk0", "deletionDate": "2020-06-24T23:18:19.411Z", "state": "DELETED" } }
Backup Plan: CREATED
{ "version": "0", "id": "b64fb2d0-ae16-ff9a-faf6-0bdd0d4bfdef", "detail-type": "Backup Plan State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T23:18:19Z", "region": "us-east-1", "resources": [ "arn:aws:backup:us-west-2:1112233445566:backup-plan:2c103c5f-6d6e-4cac-9147-d3afa4c84f59_beta" ], "detail": { "backupPlanId": "2c103c5f-6d6e-4cac-9147-d3afa4c84f59", "versionId": "N2Q4OTczMzEtZmY1My00N2UwLWE3ODUtMjViYWYyOTUzZWY4", "creationDate": "2020-06-24T23:18:15.318Z", "state": "CREATED" } }
Region Setting: MODIFIED
{ "version": "0", "id": "e7ed82ba-4955-4de5-10d6-dbafcfb68b4f", "detail-type": "Region Setting State Change", "source": "aws.backup", "account": "1112233445566", "time": "2020-06-24T22:55:03Z", "region": "us-east-1", "resources": [], "detail": { "modifiedAt": "2020-06-24T22:54:57.161Z", "ResourceTypeOptInPreference": { "Aurora": true }, "state": "MODIFIED" } }

Differences with the AWS Backup notification API

You can also use the AWS Backup notification API to track AWS Backup events with Amazon Simple Notification Service (Amazon SNS). However, EventBridge tracks more changes than the notification API, including changes to backup vaults, copy job state, Region settings, and the number of cold or warm recovery points.