Editing IAM Role Settings

For each IAM role added to Veeam Backup for AWS, you can modify the IAM role settings:

  1. Switch to the Configuration page.
  1. Navigate to Accounts > IAM Roles.
  1. Select the check box next to an IAM role whose settings you want to edit.
  1. Click Edit.
  2. Complete the Edit IAM Role wizard.
  1. To provide a new name and description for the IAM role, follow the instructions provided in section Adding IAM Roles (step 2).
  2. To edit the IAM role permissions, follow the instructions provided in section Adding IAM Roles (step 4).

When you edit the workload permissions, Veeam Backup for AWS does not automatically update the permissions already assigned to the IAM role. If you want to update these permissions, you must manually modify the IAM role in AWS Management Console as described in AWS Documentation.

  1. At the Permission check step of the wizard, Veeam Backup for AWS will verify whether the IAM role has all the permissions required to perform operations with the selected workloads.

If some of the required permissions are missing, the check will complete with errors, and the Missing Permissions column will display the list of permissions that must be granted to the IAM role. You can grant the missing permissions to the IAM role using the AWS Management Console or instruct Veeam Backup for AWS to do it, as described in section Checking IAM Role Permissions.

  1. At the Summary step of the wizard, review summary information and click Finish.

Important

After you upgrade Veeam Backup for AWS from a version prior to 7.0, the IAM Roles page will also display roles that previously existed on the backup appliance, with all the permissions available. If you want to provide granular permissions to the roles, follow the instructions provided in section Adding IAM Roles (step 4).

Editing IAM Role Settings