Permissions attached to iam_custer_role
While deploying the Base stage , Terraform creates a iam_custer_role if the use_existing_role is set to false. By default, the Terraform assigns IAM permissions required for below features:
KMS Protection of RDS resources Recovery of RDS resources Backup of EC2 resources Recovery of EC2 resources Backup from snapshot Restore from backup copy Identity management and authorization Provider managed consistent snapshots Permissions on workload VM EKS High availability Deployment
Refer to the section AWS permissions required by NetBackup Snapshot Manager from the guide AWS permissions required by NetBackup Snapshot Manager to get more details about permissions for the listed features and add new permissions in case you want to use features which are not listed here.