Granting Required EC2 Permissions
When adding a new S3 Account, we strongly recommend that you use an IAM role with a policy that grants minimum permissions required for proper functioning of MSP360 (CloudBerry) Backup.
The IAM role should have the following permissions to be able to successfully use EC2 services via MSP360 (CloudBerry) products:
- ImportInstance
- ImportImage
- DescribeInstances
- MonitorInstances
- RequestSpotInstances
- RunInstances
- StartInstances
- TerminateInstances
- ModifyInstanceAttribute
- CreateTags
- CancelImportTask
- StartInstances
- DescribeConversionTasks
- DescribeImportImageTasks
- ImportVolume
- DescribeAvailabilityZones
- DescribeSecurityGroups
- DescribeSubnets
- StopInstances
- DescribeKeyPairs
- ImportSnapshot
- DescribeImportSnapshotTasks
- CreateVolume
- DescribeImages
You can use MSP360 (CloudBerry) Explorer to create an IAM role and grant it the required permissions, or manually create a new user role using AWS Management Console. See the following articles for more information: