When attempting to add a custom role in the Veeam Backup for AWS console, the following error occurs:
Invalid role for specified account. Status code: Forbidden
Info [CDefaultAmazonStsInfrastructure] Assuming role 'arn:aws:iam::xyz:role/custom_role'.
Error [TryInvokeAsync] Attempt: 1/10. Fail: User: arn:aws:sts::xyz:assumed-role/<SERVER_NAME>-VeeamImpersonationRoleV1-XXXXXXXXXXXX/x-xxxxxxxxxxxxxxxxx is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::xxxxxxxxxxxxx:role/custom_role
A trust relationship has not been configured to allow the Veeam Backup for AWS service to use the IAM role for performing operations.