Step 3.1 Specify IAM Role
In the IAM role section of the Sources step of the wizard, specify an IAM role whose permissions will be used to access AWS services and resources, and to create cloud-native snapshots of DB instances and Aurora DB clusters. The specified IAM role must belong to the AWS account in which the RDS resources that you want to protect reside.
For an IAM role to be displayed in the IAM role list, it must be assigned permissions listed in section RDS Backup IAM Role Permissions and added to Veeam Backup for AWS, as described in section Adding IAM Roles. If you have not added the necessary IAM role to Veeam Backup for AWS beforehand, you can do it without closing the Add RDS Policy wizard. To add an IAM role, click Add and complete the Add IAM Role wizard.
It is recommended that you check whether the selected IAM role has all the required permissions to perform the operation. If the IAM role permissions are insufficient, the backup policy will fail to complete successfully. To run the IAM role permission check, click Check Permissions and follow the instructions provided in section Checking IAM Role Permissions.