IAM / storage / backup

AWS Backup (IAM)

JSON →
AWSbackupstorage

AWS Backup is a fully managed backup service that centralizes and automates the backup of data across AWS services.

iamaws
docs ↗
Permissions
Actions in this service
backup:ListBackupJobs
backup:ListBackupPlans
backup:ListBackupVaults
backup:ListRestoreJobs
backup:StartBackupJob
backup:StartRestoreJob
backup:DescribeBackupJob
backup:DescribeRestoreJob
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "backup:ListBackupJobs", "backup:ListBackupPlans", "backup:ListBackupVaults", "backup:ListRestoreJobs", "backup:StartBackupJob", "backup:StartRestoreJob", "backup:DescribeBackupJob", "backup:DescribeRestoreJob" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid backup:* — grants full control including delete and modify of backup plans and vaults
Avoid backup:DeleteBackupPlan and backup:DeleteBackupVault unless explicitly needed — can cause permanent data loss
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/backup/backup.json ↗