Step 4. Specify IAM Identity

At the Account step of the wizard, choose whether you want to use an IAM role or one-time access keys of an IAM user to allow Veeam Backup for AWS to perform the restore operation. For information on what permissions the IAM role or IAM user must have to perform restore, see this Veeam KB article.

Specifying IAM Role

To specify an IAM role for restore:

1. Select the IAM Role option.
2. Select the necessary IAM role from the list.

For an IAM role to be displayed in the IAM Role list, it must be added to Veeam Backup for AWS as described in Adding IAM Roles. If you have not added the necessary IAM role to Veeam Backup for AWS beforehand, you can do it without closing the Volume Restore wizard. To add an IAM role, click Add and complete the Add Account wizard.

Specifying One-Time Access Keys

To specify one-time access keys for restore:

1. Select the Temporary Access Keys option.
2. Use the Access Key and Secret Key fields to provide the access key ID and the secret access key.