Debugging AWS Backup Error
My S3 backups, automated and on-demand, were failing with this error:
IAM Role arn:aws:iam::<role-id>:role/service-role/AWSBackupDefaultServiceRole does not have sufficient permissions to execute the backup
This happened even when using the default role, which should automatically receive the required permissions:
Eventually, I realized that the default role should receive all of the following permissions:
- AWSBackupServiceRolePolicyForRestores
- AWSBackupServiceRolePolicyForBackup
- AWSBackupServiceRolePolicyForS3Backup
- AWSBackupServiceRolePolicyForS3Restore
In my case, the last two permissions, that is AWSBackupServiceRolePolicyForS3Backup and AWSBackupServiceRolePolicyForS3Restore were, for reasons that are unknown to me, missing. I manually created these missing permissions and assigned them to a new role:
With these new permissions, the backup succeeded.