{"id":"backup-independent-encryption-fully-managed-only","text":"AWS Backup independent encryption (using vault's KMS key instead of source resource's key) is only available for fully-managed resource types: S3, VMware VMs, DynamoDB (Advanced), EFS, Timestream, CloudFormation, and SAP HANA on EC2.","truth_value":"IN","source":"entries/2026/03/12/aws-backup-latest-devguide-encryptionhtml.md","source_url":"","source_hash":"993244b621161c16","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"backup-independent-encryption-fully-managed-only","truth_value":"IN","reason":"premise"}]}}