generated: '2026-06-20'
method: derived
source: >-
  openapi/amazon-backup-openapi.yml and
  https://docs.aws.amazon.com/aws-backup/latest/devguide/security.html
standards:
  - id: oauth2
    conforms: false
    evidence: >-
      No OAuth2 security scheme. AWS Backup authenticates with AWS Signature
      Version 4 (SigV4) request signing, not OAuth2.
  - id: oidc
    conforms: false
  - id: aws-sigv4
    conforms: true
    evidence: >-
      AWS API; all requests are authenticated with AWS Signature Version 4.
  - id: rfc9457-problem-details
    conforms: false
    evidence: >-
      Error responses use AWS JSON exception shapes (application/json with
      __type + Message), not application/problem+json.
  - id: pagination
    conforms: true
    evidence: >-
      List operations use maxResults + nextToken cursor pagination
      (ListBackupPlans, ListBackupVaults, ListBackupJobs, ListRestoreJobs).
  - id: idempotency
    conforms: true
    evidence: >-
      AWS Backup create operations accept a creatorRequestId idempotency token
      (per AWS Backup API Reference).
  - id: json-api
    conforms: false
  - id: odata
    conforms: false
  - id: fhir-r4
    conforms: false
  - id: fapi
    conforms: false
  - id: scim
    conforms: false
  - id: psd2
    conforms: false