I am trying to setup a simple on-demand backup of an s3 bucket in AWS and anything I try I always get an access denied. See screenshot:

I have tried create a new bucket which is completely public, I've tried setting the access policy on the Vault, I've tried in different regions, all have the same result. Access Denied!

The messaging doesn't advise anything other than Access Denied, really helpful!

Can anyone give me some insight into what this message is referring to and more over how I can resolve this issue.

CodePudding user response：

For aws backup, you need to set up a service role. Traditionally you need 2 policies attached.

[AWSBackupServiceRolePolicyForBackup] 
[AWSBackupServiceRolePolicyForRestore]

For S3, it seems there is a separate policy that you need to attach to your service role.

[AWSBackupServiceRolePolicyForS3Backup]
[AWSBackupServiceRolePolicyForS3Backup]