Policy: AWSBackupServiceLinkedRolePolicyForBackup ARN: arn:aws:iam::aws:policy/aws-service-role/AWSBackupServiceLinkedRolePolicyForBackup Allowed Actions Actions Services backup:TagResource backup backup-gateway:ListTagsForResource backup-gateway backup-gateway:ListVirtualMachines backup-gateway cloudformation:ListStacks cloudformation dynamodb:DeleteBackup dynamodb dynamodb:DescribeTable dynamodb dynamodb:ListTables dynamodb dynamodb:ListTagsOfResource dynamodb ec2:CopyImage ec2 ec2:CopySnapshot ec2 ec2:CreateTags ec2 ec2:CreateTags ec2 ec2:CreateTags ec2 ec2:DeleteSnapshot ec2 ec2:DeregisterImage ec2 ec2:DescribeImages ec2 ec2:DescribeInstances ec2 ec2:DescribeSnapshotTierStatus ec2 ec2:DescribeSnapshots ec2 ec2:DescribeVolumes ec2 ec2:ModifySnapshotTier ec2 elasticfilesystem:Backup elasticfilesystem elasticfilesystem:DescribeFileSystems elasticfilesystem elasticfilesystem:DescribeTags elasticfilesystem events:DeleteRule events events:DescribeRule events events:DisableRule events events:EnableRule events events:ListRules events events:ListTargetsByRule events events:PutRule events events:PutTargets events events:RemoveTargets events fsx:CopyBackup fsx fsx:DeleteBackup fsx fsx:DescribeBackups fsx fsx:DescribeFileSystems fsx fsx:DescribeVolumes fsx fsx:TagResource fsx kms:CreateGrant kms kms:DescribeKey kms kms:GenerateDataKeyWithoutPlaintext kms kms:ListGrants kms kms:ReEncryptFrom kms rds:AddTagsToResource rds rds:AddTagsToResource rds rds:AddTagsToResource rds rds:CopyDBClusterSnapshot rds rds:CopyDBSnapshot rds rds:DeleteDBClusterSnapshot rds rds:DeleteDBInstanceAutomatedBackup rds rds:DeleteDBSnapshot rds rds:DescribeDBClusterSnapshots rds rds:DescribeDBClusters rds rds:DescribeDBInstances rds rds:DescribeDBSnapshots rds redshift:DeleteClusterSnapshot redshift redshift:DescribeClusterSnapshots redshift redshift:DescribeClusters redshift redshift:DescribeTags redshift redshift-serverless:DeleteSnapshot redshift-serverless redshift-serverless:GetNamespace redshift-serverless redshift-serverless:GetSnapshot redshift-serverless redshift-serverless:GetWorkgroup redshift-serverless redshift-serverless:ListNamespaces redshift-serverless redshift-serverless:ListSnapshots redshift-serverless redshift-serverless:ListTagsForResource redshift-serverless redshift-serverless:ListWorkgroups redshift-serverless s3:GetBucketTagging s3 s3:ListAllMyBuckets s3 ssm-sap:GetOperation ssm-sap ssm-sap:UpdateHANABackupSettings ssm-sap storagegateway:DescribeCachediSCSIVolumes storagegateway storagegateway:DescribeStorediSCSIVolumes storagegateway storagegateway:ListVolumes storagegateway tag:GetResources tag timestream:DescribeDatabase timestream timestream:DescribeEndpoints timestream timestream:DescribeTable timestream timestream:GetAwsBackupStatus timestream timestream:GetAwsRestoreStatus timestream timestream:ListDatabases timestream timestream:ListTables timestream timestream:ListTagsForResource timestream