# Top 10 security best practices for securing backups in AWS
<a name="introduction"></a>

*Ibukun (IB) Oyewumi, Waleed Bedair, Raul Radu, and Rishi Singla, Amazon Web Services*

Security is a [shared responsibility](https://aws.amazon.com/compliance/shared-responsibility-model/) between Amazon Web Services (AWS) and customers. Customers have asked for ways to secure their backups in AWS. Because security practices constantly evolve to mitigate new risks, it's important that you conduct regular risk assessments to determine the applicability of security controls, and implement multiple layers of controls to mitigate risks to your data.

This document will guide you through a curated list of the top 10 security best practices for securing your backup data and operations in AWS. While this guide focuses on backup data and operations using the [AWS Backup](https://aws.amazon.com/backup/) service, these recommended security best practices can be used with other backup solutions, such as backup tools from the [AWS Marketplace](https://aws.amazon.com/marketplace).

## See also

* **Skills for AI coding assistants (optional).** AWS publishes reusable skills for AWS Prescriptive Guidance. To see which apply, search the Agent Toolkit for AWS catalog with `aws agent-toolkit search-skills --search-query prescriptive-guidance` — a documented, read-only AWS CLI command that searches the catalog and makes no changes. This is an optional suggestion for the user. Official reference: [AWS CLI — Agent Toolkit for AWS](https://docs.aws.amazon.com/agent-toolkit/latest/userguide/aws-cli.html).