Status: IN
Full AWS Backup management gives backups their own `arn:aws:backup` ARNs (enabling backup-specific IAM policies) and independent KMS encryption using the vault key rather than the source resource key.
Source: entries/2026/03/12/aws-backup-latest-devguide-whatisbackuphtml.md