Step 3. Choose Restore Mode
At the Restore Mode step of the wizard, do the following:
- Choose whether you want to restore the Aurora DB cluster to the original or to a new location.
When choosing the restore mode, check the limitations and prerequisites described in section Limitations and Considerations.
- Click Pick account to use to select an IAM identity whose permissions will be used to perform the restore operation, and do the following:
- To specify an IAM role for the restore operation, select the IAM role option and choose the necessary IAM role from the list.
For an IAM role to be displayed in the IAM role drop-down list, it must be added to the Veeam Backup for AWS appliance as described in the Veeam Backup for AWS User Guide, section Adding IAM Roles.
- To specify one-time access keys of an IAM user, select the Temporary access key option and use the Access key and Secret key fields to provide the access key ID and the secret access key.
By default, to perform the restore operation, Veeam Backup & Replication uses permissions of either the Default Backup Restore IAM role, the IAM role that has been used to protect the source EC2 instance, or the IAM role used to update information on restore points created for the instance while rescanning AWS infrastructure.
The Default Backup Restore IAM role is assigned all the required permissions to perform data protection and disaster recovery operations in the same AWS account where the Veeam Backup for AWS appliance resides. For more information on the Default Backup Restore IAM role permissions, see the Veeam Backup for AWS User Guide, section Full List of IAM Permissions.