- Veeam Support Knowledge Base
- Invalid role for specified account. Status code: Forbidden
Invalid role for specified account. Status code: Forbidden
| KB ID: | 3120 |
| Product: |
Veeam Plug-In for AWS | 7 | 8 | 9 | 9.1 | 10 Veeam Backup for AWS | 1 | 2 | 3 | 4 | 5 | 5a | 6 | 6a |
| Published: | 2020-03-02 |
| Last Modified: | 2023-11-16 |
Get weekly article updates
Cheers for trusting us with the spot in your mailbox!
Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest
Oops! Something went wrong.
Please, try again later.
Challenge
When attempting to add a custom role in the Veeam Plug-In for AWS console, the following error occurs:
Invalid role for specified account. Status code: Forbidden
Log snippet:
Info [CDefaultAmazonStsInfrastructure] Assuming role 'arn:aws:iam::xyz:role/custom_role'. Error [TryInvokeAsync] Attempt: 1/10. Fail: User: arn:aws:sts::xyz:assumed-role/<SERVER_NAME>-VeeamImpersonationRoleV1-XXXXXXXXXXXX/x-xxxxxxxxxxxxxxxxx is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::xxxxxxxxxxxxx:role/custom_role
Cause
A trust relationship has not been configured to allow the Veeam Plug-In for AWS service to use the IAM role for performing operations.
Solution
If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case.
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
