Veeam
      Back to home
      1. Support
      2. Getting started
      3. Veeam

      Generate AWS Access and Secret Keys for Veeam Backup for Public Clouds Integration

      To add an AWS account to Veeam (as shown in your screenshot), you need to provide Access Key and Secret Key credentials. These are used to authenticate Veeam with AWS services like S3 (for backups). Here's how to generate them securely.

      To integrate Veeam Backup for Public Clouds with your AWS environment, you must first generate secure credentials that allow Veeam to access AWS services such as S3. This involves creating an Access Key and Secret Key through AWS Identity and Access Management (IAM). These keys enable Veeam to authenticate and perform necessary backup and recovery operations within your AWS account. Follow the steps below to generate and securely manage these credentials.

      Steps to Generate AWS Access and Secret Keys

      1. Sign in to AWS

      2. Navigate to IAM

      • In the AWS Console, type IAM in the search bar and select IAM (Identity and Access Management).

      3. Create or Use an IAM User

      • Under Users, either:

        • Select an existing IAM user, or

        • Click Add user to create a new one.

      4. Configure Permissions

      • Ensure the user has permissions for S3 and any related services Veeam will use. For backup purposes, consider using:

        • AmazonS3FullAccess (for testing)

        • Or a more restrictive custom policy for production environments

      These permissions cover most EC2 snapshot-based backups and basic S3 file-level operations; however, they do not fully address backups for databases such as RDS and DynamoDB, or more advanced file-level backup needs across all AWS services. To properly back up EC2 instances, databases, and files, Veeam—or any third-party backup solution—requires additional permissions based on the specific AWS resources involved.

      https://helpcenter.veeam.com/docs/vbaws/guide/role_permissions_backup.html?ver=9

      5. Create Access Key

      • After selecting the user, go to the Security credentials tab.

      • Scroll to Access keys and click Create access key.

      • Select Application running outside AWS.

      • Click Next, optionally tag the key, then Create access key.

      6. Save the Keys

      • IMPORTANT: Copy the Access Key ID and Secret Access Key immediately.

      • The Secret Key will not be shown again.

      Veeam Help Center Backup IAM Permissions

      https://helpcenter.veeam.com/docs/vbaws/guide/role_permissions_backup.html?ver=9