-
- Influencer
- Posts: 19
- Liked: never
- Joined: Apr 12, 2023 7:26 pm
- Contact:
Additional Restore Mode in File Level Restore Fails
I was testing our Veeam restore features and when I try the file level restore, I can't enable the toggle for Additional restore mode, it gives me a permissions error. Is there a guide to configure this correctly? I really would like to enable this when I do FLR restores to restore back to the instance. Thank you.
-
- Product Manager
- Posts: 5838
- Liked: 1220 times
- Joined: Jul 15, 2013 11:09 am
- Full Name: Niels Engelen
- Contact:
Re: Additional Restore Mode in File Level Restore Fails
Hi,
It could be that you lack permissions on the IAM role to the kinesis service however it may be easier to contact support for an extra pair of eyes.
Can u check if the following permissions are configured to the role?
It could be that you lack permissions on the IAM role to the kinesis service however it may be easier to contact support for an extra pair of eyes.
Can u check if the following permissions are configured to the role?
Code: Select all
"kinesis:CreateStream",
"kinesis:DeleteStream",
"kinesis:DescribeStream",
"kinesis:PutRecord",
Personal blog: https://foonet.be
GitHub: https://github.com/nielsengelen
GitHub: https://github.com/nielsengelen
-
- Influencer
- Posts: 19
- Liked: never
- Joined: Apr 12, 2023 7:26 pm
- Contact:
Re: Additional Restore Mode in File Level Restore Fails
I ran the permissions check on my default IAM role in Veeam, it passed them all and Kinesis is in the list of checks so the role seems ok. The error I get is "The original instance does not have the correct permissions". So maybe I need to apply another security policy to my instances?
-
- Product Manager
- Posts: 5838
- Liked: 1220 times
- Joined: Jul 15, 2013 11:09 am
- Full Name: Niels Engelen
- Contact:
Re: Additional Restore Mode in File Level Restore Fails
The IAM role attached to the source EC2 instance requires permission to communicate with the SSM.
Can you verify all is configured as stated in our user guide?
Can you verify all is configured as stated in our user guide?
Personal blog: https://foonet.be
GitHub: https://github.com/nielsengelen
GitHub: https://github.com/nielsengelen
-
- Influencer
- Posts: 19
- Liked: never
- Joined: Apr 12, 2023 7:26 pm
- Contact:
Re: Additional Restore Mode in File Level Restore Fails
Thank you on the guide, I created an IAM role and per the guide added all the permissions now I get "SSM is unreachable" error. So progress, but a new error. 

-
- Influencer
- Posts: 19
- Liked: never
- Joined: Apr 12, 2023 7:26 pm
- Contact:
Re: Additional Restore Mode in File Level Restore Fails
Sorry to double post I would edit my last reply but I can't.
I see in the guide "The IAM role attached to the source EC2 instance has permissions to communicate with the SSM." but I am unsure how to do this. I have went into my IAM role and added full permissions for SSM but still the same result. Is there a how to on this? Thank you again.
I see in the guide "The IAM role attached to the source EC2 instance has permissions to communicate with the SSM." but I am unsure how to do this. I have went into my IAM role and added full permissions for SSM but still the same result. Is there a how to on this? Thank you again.
-
- Product Manager
- Posts: 5838
- Liked: 1220 times
- Joined: Jul 15, 2013 11:09 am
- Full Name: Niels Engelen
- Contact:
Re: Additional Restore Mode in File Level Restore Fails
Can you verify the following settings? If these are in order, I recommend you to contact our support (this is not an official support forum but we do try to help when possible
). If you do open a case, please let us know the case ID for future reference so we could potentially improve our documentation.

- The target EC2 instance must have the SSM agent installed and running. For system requirements and installation instructions for the SSM agent, visit the AWS Systems Manager documentation, https://docs.aws.amazon.com/systems-man ... l-win.html
- The target EC2 instance must have an IAM instance profile attached that:
* Allows Systems Manager to interact with the instance
For information on instance profiles and IAM policies required to create VSS-enabled snapshots, visit the AWS EC2 User Guide for Windows Instances, https://docs.aws.amazon.com/AWSEC2/late ... shots.html. - Ensure the IAM instance profile has the "AmazonSSMManagedInstanceCore" role attached.
Personal blog: https://foonet.be
GitHub: https://github.com/nielsengelen
GitHub: https://github.com/nielsengelen
-
- Influencer
- Posts: 19
- Liked: never
- Joined: Apr 12, 2023 7:26 pm
- Contact:
Re: Additional Restore Mode in File Level Restore Fails
Thank you, these steps worked and I can now enable the feature. I was trying this on a windows machine and got it working. Now I will try a linux machine to test. Appreciate all your help!
Who is online
Users browsing this forum: No registered users and 4 guests