A DocumentDB snapshot is a point-in-time backup image of an Amazon DocumentDB cluster. It captures database data and configuration so the cluster can be restored later or copied for migration, testing, or disaster recovery. Snapshots are valuable because they preserve live database contents, which often includes customer records, application state, and operational metadata.
In cyber security, snapshots matter because they are easy to overlook as “just backups,” yet they can expose the same sensitive data as the production database if permissions are too broad or encryption is misconfigured. Attackers look for publicly shared or otherwise readable snapshots to extract data offline. Defenders reduce this risk with least-privilege access, encryption, strict sharing controls, and monitoring for changes to snapshot visibility. A short-lived public share can still be enough to create a real exposure window.