RDS Snapshot export to S3 fails citing IAM role error where IAM role is created by Console itself

0

Scenario: RDS Aurora v2 DB snapshot export to S3 bucket

Console gives error Principal isn't allowed to assume the IAM role citing

  • EITHER non-existent IAM role or
  • OR Principal not allowed to take IAM role.

While this IAM role is being created by Console GUI logic itself.

IAM Error during RDS Snapshot export to S3

Additional information

  1. Principal name specified by error is rds-export.aws.internal => Here internal is never seen in any examples cited in knowledge article.
  2. Related article in knowledge center about IAM role doesn't exists asks to specify correct Principal as export.rds.amazonaws.com instead of rds.amazonaws.com

To resolve this issue, make sure that the trust relationship specifies "export.rds.amazonaws.com” instead of “rds.amazonaws.com” in your IAM policy.
While here the Principal is specified as rds-export.aws.internal which seems to be an issue

답변 없음

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠