[Optimization] Copy the EFS's Backup Policy to our Backups Vault

[Cameronsplaze]

Is your feature request related to a problem? Please describe.

I noticed our vault doesn't have a policy by default, and their managed vault does. It'd be easy to copy it over, and it'd stop anything from accidentally deleting the resources.

Main catch is if I want to create a custom resource that removes it's snapshots on delete (if the bucket is ALSO set to be removed), this would block that from triggering (The "backup:DeleteRecoveryPoint").

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Deny",
            "Principal": {
                "AWS": "*"
            },
            "Action": [
                "backup:DeleteBackupVault",
                "backup:DeleteBackupVaultAccessPolicy",
                "backup:DeleteRecoveryPoint",
                "backup:StartCopyJob",
                "backup:StartRestoreJob",
                "backup:UpdateRecoveryPointLifecycle"
            ],
            "Resource": "*"
        }
    ]
}

Describe the solution you'd like

No response

Describe alternatives you've considered

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change