Agentless, cloud-native backup for Amazon Web Services (AWS)
Post Reply
sandmanfvr
Influencer
Posts: 19
Liked: never
Joined: Apr 12, 2023 7:26 pm
Contact:

Additional Restore Mode in File Level Restore Fails

Post by sandmanfvr »

I was testing our Veeam restore features and when I try the file level restore, I can't enable the toggle for Additional restore mode, it gives me a permissions error. Is there a guide to configure this correctly? I really would like to enable this when I do FLR restores to restore back to the instance. Thank you.
nielsengelen
Product Manager
Posts: 5838
Liked: 1220 times
Joined: Jul 15, 2013 11:09 am
Full Name: Niels Engelen
Contact:

Re: Additional Restore Mode in File Level Restore Fails

Post by nielsengelen »

Hi,

It could be that you lack permissions on the IAM role to the kinesis service however it may be easier to contact support for an extra pair of eyes.

Can u check if the following permissions are configured to the role?

Code: Select all

"kinesis:CreateStream",
"kinesis:DeleteStream",
"kinesis:DescribeStream",
"kinesis:PutRecord",
Personal blog: https://foonet.be
GitHub: https://github.com/nielsengelen
sandmanfvr
Influencer
Posts: 19
Liked: never
Joined: Apr 12, 2023 7:26 pm
Contact:

Re: Additional Restore Mode in File Level Restore Fails

Post by sandmanfvr »

I ran the permissions check on my default IAM role in Veeam, it passed them all and Kinesis is in the list of checks so the role seems ok. The error I get is "The original instance does not have the correct permissions". So maybe I need to apply another security policy to my instances?
nielsengelen
Product Manager
Posts: 5838
Liked: 1220 times
Joined: Jul 15, 2013 11:09 am
Full Name: Niels Engelen
Contact:

Re: Additional Restore Mode in File Level Restore Fails

Post by nielsengelen »

The IAM role attached to the source EC2 instance requires permission to communicate with the SSM.

Can you verify all is configured as stated in our user guide?
Personal blog: https://foonet.be
GitHub: https://github.com/nielsengelen
sandmanfvr
Influencer
Posts: 19
Liked: never
Joined: Apr 12, 2023 7:26 pm
Contact:

Re: Additional Restore Mode in File Level Restore Fails

Post by sandmanfvr »

Thank you on the guide, I created an IAM role and per the guide added all the permissions now I get "SSM is unreachable" error. So progress, but a new error. :D
sandmanfvr
Influencer
Posts: 19
Liked: never
Joined: Apr 12, 2023 7:26 pm
Contact:

Re: Additional Restore Mode in File Level Restore Fails

Post by sandmanfvr »

Sorry to double post I would edit my last reply but I can't.

I see in the guide "The IAM role attached to the source EC2 instance has permissions to communicate with the SSM." but I am unsure how to do this. I have went into my IAM role and added full permissions for SSM but still the same result. Is there a how to on this? Thank you again.
nielsengelen
Product Manager
Posts: 5838
Liked: 1220 times
Joined: Jul 15, 2013 11:09 am
Full Name: Niels Engelen
Contact:

Re: Additional Restore Mode in File Level Restore Fails

Post by nielsengelen »

Can you verify the following settings? If these are in order, I recommend you to contact our support (this is not an official support forum but we do try to help when possible :-)). If you do open a case, please let us know the case ID for future reference so we could potentially improve our documentation.
  1. The target EC2 instance must have the SSM agent installed and running. For system requirements and installation instructions for the SSM agent, visit the AWS Systems Manager documentation, https://docs.aws.amazon.com/systems-man ... l-win.html
  2. The target EC2 instance must have an IAM instance profile attached that:
    * Allows Systems Manager to interact with the instance
    For information on instance profiles and IAM policies required to create VSS-enabled snapshots, visit the AWS EC2 User Guide for Windows Instances, https://docs.aws.amazon.com/AWSEC2/late ... shots.html.
  3. Ensure the IAM instance profile has the "AmazonSSMManagedInstanceCore" role attached.
Also, could you tell me the operating system of the target EC2 instance?
Personal blog: https://foonet.be
GitHub: https://github.com/nielsengelen
sandmanfvr
Influencer
Posts: 19
Liked: never
Joined: Apr 12, 2023 7:26 pm
Contact:

Re: Additional Restore Mode in File Level Restore Fails

Post by sandmanfvr »

Thank you, these steps worked and I can now enable the feature. I was trying this on a windows machine and got it working. Now I will try a linux machine to test. Appreciate all your help!
Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests