Configuring Backups for Amazon S3 with IAM Role Authentication

You can configure backups for Amazon S3 object storage using IAM role authentication.

1. From the Authentication method list, select IAM role.

2. Verify an existing CommvaultRole IAM role or create a new CommvaultRole IAM role:

   • If the CommvaultRole IAM role was previously created for another AWS workload, do the following:

     1. Verify that the IAM policies for the AWS workload are still attached to the CommvaultRole IAM role.

     2. At the bottom of the page, select the confirmation check box.

     3. Click Next.

        The Access Node page of the configuration wizard appears.

   • If the CommvaultRole IAM role does not exist yet, create it in AWS.

     Steps to create CommvaultRole IAM role

     1. Click the Launch CloudFormation Stack link to open the AWS console.

        Important

        If you do not have permission to create a role in the AWS account, copy the Launch CloudFormation Stack link and share it with your AWS IAM administrator.

     2. Log on to the AWS console.

        The Quick create stack page appears.

     3. Under Capabilities, read the information about the template, and then select the acknowledgment check box.

     4. Click Create stack.

        Wait for the CloudFormation Stack to finish creating the CommvaultRole IAM Role. The CloudFormation Stack creates IAM policies for all supported AWS workloads, and then attaches the policies to CommvaultRole.

     5. Return to the Commvault configuration wizard.

     6. At the bottom of the page, select the confirmation check box.

     7. Click Next.

        The Access Node page of the configuration wizard appears.