backup:CreateRestoreTestingPlan is a Write access-level action in the backup service. Grants permission to create a new restore testing plan
ARNs that backup:CreateRestoreTestingPlan can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants backup:CreateRestoreTestingPlan.
Filters access by the allowed set of values for each of the tags
Filters access by the presence of mandatory tags in the request
Filters access by the tags associated with the resource
A minimal policy that allows backup:CreateRestoreTestingPlan. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowBackupCreateRestoreTestingPlan",
"Effect": "Allow",
"Action": "backup:CreateRestoreTestingPlan",
"Resource": "*"
}
]
}