Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Marketplace Deployment on AWS
  3. NetBackup configuration parameters
  4. NetBackup installation parameters for Cloud Recovery server
  5. IAM role required for Cloud Recovery Server
NetBackup™ Marketplace Deployment on AWS

IAM role required for Cloud Recovery Server

Below table states the details of the permissions of IAM role required for Cloud Recovery Server:

Table: IAM roles for Cloud Recovery Server

  
  • ec2:CreateTags

  • ec2:DescribeImportImageTasks

  • ec2:ImportImage

  • ec2:DescribeImages

  • iam:ListRolePolicies

  • iam:ListRoles

  • iam:GetRole

  • iam:GetRolePolicy

  • iam:CreateRole

  • iam:PutRolePolicy

  • s3:ListAllMyBuckets

*

  • s3:*

Give this access only to the bucket and its objects where MSDP images are stored.

Note:

Refer IAMRoleCreation and IAMPolicyCreation for creating IAM role and policies.

Feedback

Was this page helpful?
Previous

NetBackup installation parameters for Cloud Recovery server

Next

Deploying Snapshot Manager

Feedback

Was this page helpful?