AWS Backup Service

Question

I have initiated a backup plan using the Backup service back in late June. I am noticing a pattern of failed S3 backup jobs, although I attached a manual inline policy:

`"Action": [
                "s3:ListBucket",
                "s3:GetBucketVersioning",
                "s3:GetObject",
                "s3:GetObjectVersion",
                "s3:GetBucketLocation",
                "backup:StartBackupJob",
                "backup:StartRestoreJob"
            ],
            "Resource": "arn:aws:s3:::*"`

Answer

I’d check to see if there’s any deny policies on the S3 bucket policies.

Versioning is a prerequisite too

Answer

Hi Mohamad,

If the error is access denied, it will come down to either the role associated with the backup job does not have the necessary permissions to access the S3 bucket or the S3 bucket has a policy that denies access.
1. Check if there is an S3 bucket policy defined in the bucket and whether there is a deny blocking access to this bucket from the backup role.
2. On the role associated with AWS backups, try attaching the AWS managed policy ([AWS Backup For Amazon S3 Backup Policy](https://docs.aws.amazon.com/aws-backup/latest/devguide/s3-backups.html))

AWS Backup Service

Relevant content