Skip to main content
System requirements and prerequisites for AWS S3 buckets
Updated this week

❗ Important

This feature has limited availability. To know more about limited availability and sign up for this feature, contact your Account Manager.


Software requirements

  • EC2 instance size

    • Create an EC2 machine with the minimum specifications required for protection support

      • Instance type: We recommend an instance with 16 cores and 32GB RAM and running 2 jobs in parallel.

      • Platform: Linux/Ubuntu

      For more information on creating an EC2 instance, see Get started with Amazon EC2.

  • Operating System

    • AWS S3 backup supports only Linux/Ubuntu proxies.

Prerequisites

Identity Access Management (IAM) role

Attach the Identity Access Management (IAM) role to the EC2 instance with S3 permissions. Perform the following:

  1. Login to the AWS console.

  2. Search for the EC2 service and click to open it.

    1. For IAM role permissions, see IAM roles and permissions for S3.

    1. Go to the EC2 instance and click Actions > Security > Modify IAM role.

    2. Provide the IAM role that was created and click Update IAM role.

Key Management Service

If you are using keys from the KMS service then:

For AWS managed keys, allow access through AWS S3 for all principals in the account authorized to use AWS S3. For this, the key assignment will not be required in IAM.


For customer managed keys, assign the IAM role to this key. For more information, see Setting up customer managed keys and assignment of IAM role.

Perform the following steps:

  1. Login to the AWS console.

  2. Go to KMS (Key Management Service).​

  3. Click on the Key that is used in the S3 bucket.

  4. Under the Key administrators add the IAM role that has permissions to access the S3 bucket.

  5. Under the Key users add the IAM role that has permission to access the S3 bucket.

PrivateLink

If you are using a PrivateLink for proxy activation, then assign the IAM role to the private EC2 instance of NAS proxy for backup and restore.

Did this answer your question?