- Veeam Support Knowledge Base
- Granular AWS Account Permissions for Adding an S3 Repository
Granular AWS Account Permissions for Adding an S3 Repository
Cheers for trusting us with the spot in your mailbox!
Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest
This article contains information relevant to Veeam Backup for AWS and its respective plugin for version 5.
Starting with Veeam Backup for AWS 6, granular permissions are now available within the product user guide:
AWS Plug-In for Veeam Backup & Replication > AWS IAM User Permissions
Objective
This article documents the granular permissions required to add an S3 repository to Veeam Backup for AWS.
Alternatively, you can use cumulative permissions listed in the Integration with Veeam Backup for AWS Guide.
Solution
Two identities participate in the creation of an S3 standard or archive repository:
- AWS account that you specify at the Account step of the Add External Repository wizard.
- IAM role created on the Veeam Backup for AWS appliance.
The IAM role must have permissions described in the Repository IAM Role Permissions section in the Veeam Backup for AWS User Guide.
The AWS role must have the following permissions:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:DescribeRegions",
"s3:ListAllMyBuckets",
"s3:GetBucketLocation",
"iam:GetRole",
"iam:SimulatePrincipalPolicy",
"s3:ListBucket",
"s3:CreateBucket",
"s3:GetObject",
"s3:PutObject"
],
"Resource": "*"
}
]
}To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
Oops! Something went wrong.
Please try again later.
You have selected too large block!
Please try select less.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Thank you!
Your feedback has been received and will be reviewed.