| name | 
The name of a logical container where backups are stored. (Required) | 
| tags map | 
Metadata that you can assign to help organize the resources that you create. | 
| creator-request-id | 
A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice. | 
| encryption-key | 
The server-side encryption key that is used to protect your backups; for example, arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab. | 
| access-policy | 
The backup vault access policy document in JSON format. | 
| backup-vault-event set | 
The list of events that indicate the status of jobs to back up resources to the backup vault. Valid values are BACKUP_JOB_STARTED, BACKUP_JOB_COMPLETED, BACKUP_JOB_SUCCESSFUL, BACKUP_JOB_FAILED, BACKUP_JOB_EXPIRED, RESTORE_JOB_STARTED, RESTORE_JOB_COMPLETED, RESTORE_JOB_SUCCESSFUL, RESTORE_JOB_FAILED, COPY_JOB_STARTED, COPY_JOB_SUCCESSFUL, COPY_JOB_FAILED, RECOVERY_POINT_MODIFIED, BACKUP_PLAN_CREATED and BACKUP_PLAN_MODIFIED. Can only be set if sns-topic is set. | 
| sns-topic | 
The SNS topic for a backup vault’s events. Can only be set if backup-vault-events is set. |