Restore SQL bak backupfile to RDS Database

Question

i got backup from SQL server DB, upload file bak into Bucket S3 and tried to restore it into db on RDS with following commands:

exec msdb.dbo.rds_restore_database
@restore_db_name='database',
@s3_arn_to_restore_from='arn:aws:s3:::S3_bucket/file.bak';

but i received this error:

[2024-11-13 11:46:22.087] Aborted the task because of a task failure or a concurrent RESTORE_DB request. [2024-11-13 11:46:22.130] Task has been aborted [2024-11-13 11:46:22.133] Error making request with Error Code Forbidden and Http Status Code Forbidden. No further error information was returned by the service.

I checked again and again database group option, IAM role and they seem correct.

what do you suggest over?

Gary Mclean · Accepted Answer

Check the encryption on the bucket and make sure the IAM role has decrypt permission to the key

re:Post Agent · Answer

Based on the error message you received, it appears that there might be an issue with permissions or access to the S3 bucket containing your backup file. Here are some suggestions to troubleshoot and resolve the issue:

1. Verify IAM Role Permissions: Ensure that the IAM role associated with your RDS instance has the necessary permissions to access the S3 bucket and the specific backup file. The role should have both read and list permissions for the S3 bucket.

2. Check S3 Bucket Policy: Review the S3 bucket policy to confirm that it allows access from your RDS instance. Make sure the policy grants the required permissions to the IAM role used by your RDS instance.

3. Confirm Option Group Configuration: Double-check that the SQLSERVER_BACKUP_RESTORE option is correctly added to your DB instance's option group. This option is required for native backup and restore operations.

4. Verify S3 Bucket Region: Ensure that the S3 bucket containing your backup file is in the same AWS region as your RDS instance. Cross-region restores are not supported.

5. Check Backup File Integrity: Verify that the .bak file in your S3 bucket is not corrupted and is a valid SQL Server backup file.

6. Review RDS Instance Encryption: If your RDS instance is encrypted, make sure you've provided a customer-managed KMS key in the IAM role and in the restore procedure.

7. Confirm Backup File Size: Ensure that your backup file doesn't exceed the 5 TB size limit for S3 objects.

8. Check Concurrent Tasks: Verify that you don't have more than two backup or restore tasks running simultaneously on your RDS instance.

If you've verified all these points and are still encountering issues, you may want to review the AWS CloudTrail logs for more detailed error information or contact AWS Support for further assistance.  
**Sources**  
[Importing and exporting SQL Server databases using native backup and restore - Amazon Relational Database Service](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/SQLServer.Procedural.Importing.html)  
[SQL Server database backup and restore using Amazon S3 - Database Migration Guide](https://docs.aws.amazon.com/dms/latest/sbs/chap-manageddatabases.sql-server-rds-sql-server-full-load-backup-restore.html)  
[Access to transaction log backups with RDS for SQL Server - Amazon Relational Database Service](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER.SQLServer.AddlFeat.TransactionLogAccess.html)

Restore SQL bak backupfile to RDS Database

Add your answer

Relevant content