AWS Backup adds OTP verification for Multi-party approval on logically air-gapped vaults

AWS Backup Multi-party Approval Updates

AWS Backup now requires one-time password (OTP) verification when approvers vote on Multi-party approval actions for logically air-gapped vaults. When an approver votes on a Multi-party approval request, they must enter a six-digit code sent to their registered email address in AWS IAM Identity Center. This ensures that only verified approvers can authorize protected vault operations, adding an additional layer of security for approval teams. OTP verification applies automatically to all existing and new Multi-party approval sessions for logically air-gapped vaults at no additional charge, with no setup required.

What to do

• Ensure your team is aware of the new OTP verification requirement for Multi-party approval actions.
• Verify that your team members have registered email addresses in AWS IAM Identity Center.
• Review the updated documentation for more details.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.