为使用AWS Backup服务,需要在AWS Identity and Access Management(IAM)中授权用户具有适当的权限。以下是授权AWS备份创建和管理资源的示例IAM策略:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"backup:CreateBackupPlan",
"backup:CreateBackupSelection",
"backup:CreateBackupVault",
"backup:DeleteBackupPlan",
"backup:DeleteBackupSelection",
"backup:DeleteBackupVault",
"backup:DescribeBackupJob",
"backup:DescribeBackupVault",
"backup:ListBackupJobs",
"backup:ListBackupPlans",
"backup:ListBackupSelections",
"backup:ListBackupVaults",
"backup:StartBackupJob"
],
"Resource": "*"
}
]
}
请注意,“Resource”部分指示论述“Effect”和“Action”的资源范围。根据需要进行更改。建议使用标记定位策略以供跟踪用途。
上一篇:AWS备份窗口