Policy: AWSBackupServiceRolePolicyForItemRestores ARN: arn:aws:iam::aws:policy/AWSBackupServiceRolePolicyForItemRestores Allowed Actions Actions Services ebs:GetSnapshotBlock ebs ebs:ListSnapshotBlocks ebs ec2:DescribeSnapshots ec2 kms:Decrypt kms kms:DescribeKey kms kms:GenerateDataKey kms s3:AbortMultipartUpload s3 s3:GetBucketLocation s3 s3:ListBucket s3 s3:ListMultipartUploadParts s3 s3:PutObject s3