运行 AWS Backup start_copy_job 函数时权限不足

Question

I'm trying to start a copy job to copy RDS snapshot from one backup vault to another backup vault in diferent region using lambda function but getting error with this message:

An error occurred (AccessDeniedException) when calling the StartCopyJob operation: Insufficient privileges to perform this action

function call is like this-

        result =conn.start_copy_job(RecoveryPointArn='my-arn',
            SourceBackupVaultName='my-vault',
            DestinationBackupVaultArn='my-dest-vault-arn',
            IamRoleArn='AWSBackupDefaultServiceRole')

Following permissions assigned to lambda role-

All resources   
Allow: backup:*
Allow: backup:CopyFromBackupVault
arn:aws:backup:*:*:backup-vault:*   
Allow: backup:DescribeBackupVault
Allow: backup:CopyIntoBackupVault

Could someone explain what I'm missing here?

Answer 1

I need to provide full arn of role AWSBackupDefaultServiceRole.