Access Denied (code 3013)

Situation

A backup plan terminates with the following error: Access Denied. Cannot complete the operation due to insufficient permissions on cloud storage

Cause

For AWS S3: Most probably, your AWS IAM user does not have enough permissions to access your storage For Backblaze B2: the specified key pair has no sufficient writing permissions.

Solution

For AWS S3

Grant permissions to access your S3 storage for your IAM user. To do this, proceed as follows:

1. Open the AWS Console and go to IAM https://console.aws.amazon.com/iam/.
2. Go to Users, then select the required user.
3. Click Add permissions, then select Attach existing policies directly.
4. In the search field, type AmazonS3FullAccess.
5. Also apply the AmazonGlacierFullAccess policy.
6. Select the corresponding checkboxes.
7. Click Next: Review.
8. Click Add permissions.

These actions will apply full permissions to access all buckets in the storage for your IAM user.

For Backblaze B2

Make sure your key pair has sufficient permissions. To do this, proceed as follows:

1. Log into your Backblaze console.
2. Select App Keys.
3. Find your key pair and view the permissions.

4. The key pair permissions must contain the following ones: writeBuckets, writeFiles, writeKeys.

If the key pair does not contain these permissions, create a new one. To do this, proceed as follows:

1. In the App Keys, click Add a New Application Key.

2. In the Add Application Key box, specify the kay pair settings. In the Type of Access group, select Read and Write (for backup and restore purposes) or Write Only (for backup purposes only) option.

3. Once you are done, click Create New Key.
4. As the key pair is created, save the new credentials to a safe place for further use.

5. Create a new storage account using these credentials. To learn how to create a new Backblaze B2 storage account, refer to the Add Backblaze B2 Storage chapter at help.msp360.com.