IAM Role to connect to the repository

Veeam Backup for AWS
Last Modified:


Backup service is using this role to generate temporary access keys to connect to the S3 bucket where backup data is stored (Veeam Backup Object Repository).


Please follow the instruction below to create the role:

1. Please use the following JSON text (replacing <yourbucketname> with actual name) to create IAM Policy by following instructions from How to create IAM Policy article.
These permissions will allow backup service to access the S3 repository to save/load data in the object repository:

	"Version": "2012-10-17",
		"Statement": [
			"Action": [
				"Resource": "arn:aws:s3:::<yourbucketname>/*",
				"Effect": "Allow"
2. Navigate to Roles.
3. Choose "Create role".
4. Select type of trusted entity "AWS Service".
5. Choose "S3" in "Choose the service that will use this role".
6. Select your use case "S3".
7. Press on "Next: Permissions" button.
8. Enter the name of the policy selected on step 1 in "filter policies" edit box.
9. Select the policy with ticking on the checkbox in the first column.
10. Press "Next: Tags" button.
11. Enter tagging info if desired and press "Next: Review" button.
12. Give a name to the IAM Role - you will be using this name in the Veeam Backup for AWS UI (e.g. vb4aws_repo1role).
13. Press "Create role" button.
14. After successful creation of the role you will be able to see it in the list of all available roles.

Rate the quality of this KB article: 
5 out of 5 based on 1 ratings

Couldn't find what you were looking for?

Below you can submit an idea for a new knowledge base article.

Report a typo on this page:

Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!

Spelling error in text: