Create policy
Create a policy in your AWS console and grant the following permissions required by NetBackup.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetBucketLocation",
"s3:ListAllMyBuckets",
"s3:CreateBucket",
"s3:ListBucket",
"s3:GetBucketObjectLockConfiguration",
"s3:DeleteObject",
"s3:PutObject",
"s3:GetObject",
"s3:GetBucketPolicyStatus",
"s3:GetObjectRetention",
"s3:DeleteObjectVersion",
"s3:GetBucketVersioning",
"s3:BypassGovernanceRetention",
"s3:GetBucketPolicy",
"s3:PutBucketPolicy",
"s3:PutBucketObjectLockConfiguration",
"s3:DeleteBucket",
"s3:DeleteBucketPolicy",
"s3:PutBucketVersioning",
"s3:GetObjectVersion",
"s3:ListBucketVersions",
"s3:PutObjectRetention",
"s3:RestoreObject"
],
"Resource": [
"arn:aws:s3:::*"
]
},
{
"Effect": "Allow",
"Action": [
"ec2:DescribeImages"
],
"Resource": [
"*"
]
}
]
}