Checking IAM Role Permissions

It is recommended that you run the IAM role permission check before you perform any operation to avoid the operation failure. For example, after you specify an IAM role in worker instance settings, you can check whether permissions of this IAM role are sufficient to launch worker instances. You can also run the permission check after you make changes in your AWS account and want to ensure that permissions granted to the IAM role remain sufficient.

To run the permission check for an IAM role, do the following:

1. Switch to the Configuration page.

2. Navigate to Accounts > IAM Roles.

3. Select an IAM role and click Check AWS Permissions.

Veeam Backup for AWS will display the AWS Permission Check window where you can track the progress and view the results of the check. If the IAM role permissions are insufficient, the check will complete with errors, and the list of permissions that must be granted to the IAM role will be displayed in the Missing Permissions column. You can grant the missing permissions to the IAM role using the AWS Management Console or instruct Veeam Backup for AWS to do it.

To let Veeam Backup for AWS grant the missing permissions:

1. In the AWS Permission Check window, click Grant.
2. In the Grant permissions window, provide one-time access keys of an IAM user that is authorized to update permissions of IAM roles, and then click Apply.

The IAM user must have the following permissions:

3. To make sure that the missing permissions have been successfully granted, click Recheck.