Product logo
DocsBlogPricing

Permissions for @turbot/aws-backup

Taking a look at permissions and associated grant levels for each permission for Backup:

PermissionGrant LevelHelp
backup-storage:MountCapsuleAdminThis permission is required to create a Backup Vault.
backup:CreateBackupPlanAdmin
backup:CreateBackupSelectionAdmin
backup:CreateBackupSelectionAdmin
backup:CreateBackupVaultAdmin
backup:DeleteBackupPlanAdmin
backup:DeleteBackupSelectionAdmin
backup:DeleteBackupSelectionAdmin
backup:DeleteBackupVaultAdmin
backup:DeleteBackupVaultAccessPolicyAdmin
backup:DeleteBackupVaultNotificationsAdmin
backup:DeleteRecoveryPointAdmin
backup:DescribeBackupJobMetadata
backup:DescribeBackupVaultMetadata
backup:DescribeProtectedResourceMetadata
backup:DescribeRecoveryPointMetadata
backup:DescribeRestoreJobMetadata
backup:ExportBackupPlanTemplateMetadata
backup:GetBackupPlanMetadata
backup:GetBackupPlanFromJSONMetadata
backup:GetBackupPlanFromTemplateMetadata
backup:GetBackupSelectionMetadata
backup:GetBackupVaultAccessPolicyMetadata
backup:GetBackupVaultNotificationsMetadata
backup:GetRecoveryPointRestoreMetadataMetadata
backup:GetSupportedResourceTypesMetadata
backup:ListBackupJobsMetadata
backup:ListBackupPlanTemplatesMetadata
backup:ListBackupPlanVersionsMetadata
backup:ListBackupPlansMetadata
backup:ListBackupSelectionsMetadata
backup:ListBackupVaultsMetadata
backup:ListProtectedResourcesMetadata
backup:ListRecoveryPointsByBackupVaultMetadata
backup:ListRecoveryPointsByResourceMetadata
backup:ListRestoreJobsMetadata
backup:ListTagsMetadata
backup:PutBackupVaultAccessPolicyAdmin
backup:PutBackupVaultNotificationsOperator
backup:StartBackupJobOperator
backup:StartRestoreJobOperator
backup:StopBackupJobOperator
backup:TagResourceOperator
backup:UntagResourceOperator
backup:UpdateBackupPlanAdmin
backup:UpdateRecoveryPointLifecycleAdmin
backup:UpdateRegionSettingsAdmin
health:DescribeEventAggregatesMetadata
kms:DescribeKeyMetadata
kms:ListAliasesMetadata
kms:ListKeysMetadata