<\/p>\n
Table of Contents<\/p>\n\t\t\t\t
- <\/ul>\n\t\t\t\t<\/div>\n
Use CloudBerry Explorer PRO to create AWS IAM user<\/strong>. You can download a fully functional trial version,<\/a>\u00a0it is free for 15 days.<\/p>\n To start you\u2019ll need an Amazon Web Services account configured in CloudBerry Explorer.\u00a0Having an Amazon Glacier account assigned with CloudBerry Explorer you can start creating your IAM user. Below are the steps you have to take:<\/p>\n 1<\/var> Open CloudBerry Explorer PRO, go to \u201cAccess Manager (IAM)\u201d and click on the \u201cAccess Manager\u201d. 2<\/var> Select an Amazon Glacier account you are going to work with. 3<\/var> Create an IAM user by clicking on New User<\/strong>... button on the toolbar: Type a username and click OK: Note:<\/strong> you can create a group and use a group policy for every new user by assigning the user to the group (use New Group... toolbar button to create a group).<\/p>\n 4<\/var> Set up permissions for the IAM user. Just click New Policy<\/strong>... toolbar button Specify a policy name and select the IAM user from the drop-down list that you would like to set policy to.<\/p>\n Note:<\/strong> if you want to create a policy for a group, select Group in \"Apply policy to\" options.<\/p>\n To specify a policy script, click on Policy Script<\/strong> tab and copy-paste the following policy there:<\/p>\n This is minimum required permissions for backup\/restore using CloudBerry Backup - it grants read\/write access to a certain vault to your IAM user. Note:<\/strong> to get ARN address (arn:aws:glacier:YOURREGION:XXXXXXXXXXXX:vaults\/YOURVAULT) of your vault you can right-click on the vault being on left or right pane in CloudBerry Explorer and select Properties, then you will see Vault ARN (copy-paste it):<\/p>\n Click OK to create a policy.<\/p>\n 5<\/var> After all the steps are completed, to let this user back up with MSP360 Backup you have to create Access and Secret Keys for it.<\/p>\n<\/div>\n 1<\/var> In IAM Manager, right-click on your IAM user and select Manage Access Keys. 2<\/var> \u00a0In the opened window click \u201cCreate\u201d - Access Key and Secret Key for your IAM user will be generated automatically. 3<\/var> \u00a0\u0421opy your credentials to the clipboard or save it to a file. 1<\/var> \u00a0Open your MSP360 Backup. In the \u201cFile\u201d menu choose \u201cAmazon Glacier\u201c account: 2<\/var> \u00a0Create a new account or edit the existing one. 3<\/var> \u00a0In the opened window insert previously created Access and Secret Keys and drop-down the list of vaults so that you can select the one you are granted to work with. 4<\/var> Now your MSP360 Backup user will have access with configured permissions only to a specified location in your Amazon Glacier account.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":" Below is a guide on how to: Configure multiple users with limited access to Amazon Glacier account using CloudBerry Explorer Generate individual Access and Secret Keys for each user in CloudBerry Explorer \u0421onfigure CloudBerry Backup to use AWS IAM user account.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[883,877],"tags":[],"class_list":["post-5138","post","type-post","status-publish","format-standard","hentry","category-backup-and-dr-articles","category-blog-articles"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts\/5138","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/comments?post=5138"}],"version-history":[{"count":2,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts\/5138\/revisions"}],"predecessor-version":[{"id":52703,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/posts\/5138\/revisions\/52703"}],"wp:attachment":[{"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/media?parent=5138"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/categories?post=5138"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.msp360.com\/resources\/wp-json\/wp\/v2\/tags?post=5138"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"CTA\"](\"https:\/\/no-cache.hubspot.com\/cta\/default\/5442029\/9120adb3-1267-4129-ad5a-d8f06b87d969.png\")
<\/a><\/span><\/span>\n<\/div>\n![\"WP](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2019\/07\/Mastering-AWS-IAM-for-Amazon-S3.png\")
<\/div>\n<\/div>\n![\"1\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/11.png\")
<\/p>\n![\"2\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/21.png\")
<\/p>\n![\"3\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/3.png\")
<\/p>\n![\"4\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/4.png\")
<\/p>\n![\"5\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/5.png\")
<\/p>\n
\n\"Statement\": [
\n{
\n\"Effect\": \"Allow\",
\n\"NotAction\": \"glacier:DeleteVault\",
\n\"Resource\": \"arn:aws:glacier:YOURREGION:XXXXXXXXXXXX:vaults\/YOURVAULT\",
\n\"Condition\": {}
\n},
\n{
\n\"Effect\": \"Allow\",
\n\"Action\": \"glacier:*\",
\n\"Resource\": \"arn:aws:glacier:YOURREGION:XXXXXXXXXXXX:vaults\/YOURVAULT\/*\",
\n\"Condition\": {}
\n},
\n{
\n\"Effect\": \"Allow\",
\n\"Action\": \"glacier:ListVaults\",
\n\"Resource\": \"arn:aws:glacier:*:XXXXXXXXXXXX:vaults\/*\",
\n\"Condition\": {}
\n}
\n]
\n}<\/div>\n![\"CTA\"](\"https:\/\/no-cache.hubspot.com\/cta\/default\/5442029\/015aca63-e776-436f-9ef1-337ab4cf6692.png\")
<\/a><\/span><\/span><\/div>\n![\"6\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/6.png\")
<\/p>\nCreating Access Keys<\/h2>\n
![\"7\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/7.png\")
<\/strong><\/p>\n![\"8\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/8.png\")
<\/p>\n![\"9\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/9.png\")
<\/p>\n<\/div>\nApplying IAM keys to MSP360 Backup<\/h2>\n
![\"10\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/10.png\")
<\/p>\n![\"11\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/111.png\")
<\/p>\n![\"12\"](\"https:\/\/www.msp360.com\/resources\/wp-content\/uploads\/2014\/08\/12.png\")
<\/p>\n