AWS Backup IAM Issue Error on Cloudtrail InvalidParameterValueException

0

Hello, I would like to backup my instances and s3 buckets completely. I attached the needed permision for AWSBackupDefaultServiceRole role. Still there is a problem and i can not figure it out. Any guess?

ROLE Role policies

CLOUDTRAIL Cloudtrail output

keaml
asked 2 years ago386 views
1 Answer
0

Hi there,

There wasn't a lot of details in your post, but I'll make a few assumptions.

I tried what I think is the same thing you tried: with an on-demand backup (EC2), and also got the error the first time. Then a few minutes later, I tried it a second time (same on-demand/EC2) and was successful.

Reading in the AWS documentation (https://docs.aws.amazon.com/aws-backup/latest/devguide/iam-service-roles.html), it says under "Creating the default Service Role"... "3. Verify that you have created the AWSBackupDefaultServiceRole in your account by following these steps: a. Wait a few minutes...."

It appears there is a delay the first time the role is created.

Also, I noticed that after creating the role in an EC2 backup, it doesn't add the S3 permissions thereafter. After EC2, I tried an initial S3 backup which failed. I manually added the AWSBackupServiceRolePolicyForS3Backup (and AWS...S3Restores) policies (as you show in your screenshot), and then ran an S3 backup. It's been running for 15 minutes, whereas the initial backup failed almost immediately. I assume this one will be successful.

Hope this helps!

Rob_El
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions