# BackupSelectionProps

Properties for a BackupSelection.

Extends: BackupSelectionProps
Extends: BackupSelectionOptions
Used as props by: BackupSelection

- Source: [`aws-backup/lib/selection.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-backup/lib/selection.ts#L66)
- Type last changed: v2.234.0 · 8 Jan 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_backup as backup } from 'aws-cdk-lib';
import { aws_iam as iam } from 'aws-cdk-lib';
import { aws_backup as interfaces_backup } from 'aws-cdk-lib/interfaces';

declare const backupPlanRef: interfaces_backup.IBackupPlanRef;
declare const backupResource: backup.BackupResource;
declare const role: iam.Role;
const backupSelectionProps: backup.BackupSelectionProps = {
  backupPlan: backupPlanRef,
  resources: [backupResource],

  // the properties below are optional
  allowRestores: false,
  backupSelectionName: 'backupSelectionName',
  disableDefaultBackupPolicy: false,
  role: role,
};
```

## Properties

- `allowRestores`: boolean = false — Whether to automatically give restores permissions to the role that AWS Backup uses.

  If `true`, the `AWSBackupServiceRolePolicyForRestores` managed
  policy will be attached to the role.

- `backupPlan`: [IBackupPlanRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_backup.IBackupPlanRef.html) (required) — The backup plan for this selection.

- `backupSelectionName`: string — The name for this selection.

  **Default:** a CDK generated name

- `disableDefaultBackupPolicy`: boolean = false — Whether to disable automatically assigning default backup permissions to the role that AWS Backup uses.

  If `false`, the `AWSBackupServiceRolePolicyForBackup` managed policy will be
  attached to the role.

- `resources`: [BackupResource](/cdk/api/v2/docs/aws-cdk-lib.aws_backup.BackupResource.html)[] (required) — The resources to backup.

  Use the helper static methods defined on `BackupResource`.

- `role`: [IRole](/cdk/api/v2/docs/aws-cdk-lib.aws_iam.IRole.html) — The role that AWS Backup uses to authenticate when backuping or restoring the resources.

  **Default:** a new role will be created

  The `AWSBackupServiceRolePolicyForBackup` managed policy
  will be attached to this role unless `disableDefaultBackupPolicy`
  is set to `true`.