Please see below for the minimum required permissions for the AWS IAM user to setup your API integration in Backup Radar
Service | Permissions | Note |
AWS Backup | ListBackupPlans ListBackupJobs ListBackupVaults |
for all services |
EC2 | DescribeInstances DescribeVolumes DescribeSnapshots |
only for EBS or Storage Gateway backups |
EFS | DescribeFileSystems DescribeBackups DescribeSnapshots |
only for EFS backups |
DescribeFileSystems | ||
FSx | DescribeFileSystems DescribeBackups DescribeSnapshots |
only for FSx backups |
RDS |
DescribeDBClusterSnapshots DescribeDBSnapshots |
only for RDS, DocumentDB, Neptune and Aurora backups |
Storage Gateway | ListGateways ListVolumes |
only for EBS or Storage Gateway backups |
CloudFormation | DescribeStacks | only for CloudFormation backups |
Redshift | DescribeClusterSnapshots | only for Redshift backups |
If you would prefer to use the JSON permissions to assign these to your IAM user, please see the below JSON file.
- BR-AWS-Permissions.json833 Bytes