Policy: AWSBackupServiceRolePolicyForS3Backup ARN: arn:aws:iam::aws:policy/AWSBackupServiceRolePolicyForS3Backup Allowed Actions Actions Services backup:TagResource backup cloudwatch:GetMetricData cloudwatch events:DeleteRule events events:DescribeRule events events:DisableRule events events:EnableRule events events:ListRules events events:ListTargetsByRule events events:PutRule events events:PutTargets events events:RemoveTargets events kms:Decrypt kms kms:DescribeKey kms s3:GetBucketAcl s3 s3:GetBucketLocation s3 s3:GetBucketNotification s3 s3:GetBucketTagging s3 s3:GetBucketVersioning s3 s3:GetInventoryConfiguration s3 s3:GetObject s3 s3:GetObjectAcl s3 s3:GetObjectTagging s3 s3:GetObjectVersion s3 s3:GetObjectVersionAcl s3 s3:GetObjectVersionTagging s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:ListBucketVersions s3 s3:PutBucketNotification s3 s3:PutInventoryConfiguration s3