AWS Backup IAM Issue Error on Cloudtrail InvalidParameterValueException

Hi there,

There wasn't a lot of details in your post, but I'll make a few assumptions.

I tried what I think is the same thing you tried: with an on-demand backup (EC2), and also got the error the first time. Then a few minutes later, I tried it a second time (same on-demand/EC2) and was successful.

Reading in the AWS documentation (https://docs.aws.amazon.com/aws-backup/latest/devguide/iam-service-roles.html), it says under "Creating the default Service Role"... "3. Verify that you have created the AWSBackupDefaultServiceRole in your account by following these steps: a. Wait a few minutes...."

It appears there is a delay the first time the role is created.

Also, I noticed that after creating the role in an EC2 backup, it doesn't add the S3 permissions thereafter. After EC2, I tried an initial S3 backup which failed. I manually added the AWSBackupServiceRolePolicyForS3Backup (and AWS...S3Restores) policies (as you show in your screenshot), and then ran an S3 backup. It's been running for 15 minutes, whereas the initial backup failed almost immediately. I assume this one will be successful.

Hope this helps!