Scan AWS Backup plans for cross-account copy

[guikcd]

Customer has deployed this solution and had an issue for one account (111111111111) having AWS Backup cross-account copy feature.

On account 111111111111, AWS Backup is used to schedule Amazon RDS snapshots (within same account) and to copy them into another account 222222222222 (so x2 backup plans every day)

When migrating the account 111111111111, they noticed that AWS Backup plan to copy job in account 222222222222 failed:

Access denied: Copy job failed. Both source and destination account must be a member of the same organization

Source

For the context, there is no other settings:

• no backup policies
• no policies attached to organization’s root account (SCP and RCP are disabled in organization service)
• no delegated admins in organization

I'll test this with customer.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

[tbelmega]

Hi @guikcd , thanks for the pull request! We will include this feature in the next patch release.

[guikcd]

Done a test with customer today. The policy is correctly fetched and now be visible in the Policy Explorer resources based policies UI.