By maintaining ASVS Level 2 (OWASP Application Security Verification Standard (ASVS) ) tell me how to Implementation/Proof/Evidence in short below (you can use  in python/Nodejs Webapp in AWS like cloud provider as an example) during the Application backup (Backup and retention - PaaS/SaaS services)

"Backup specifications for IaaS, PaaS and SaaS services shall be approved by Application or System Owner."