Druva

EC2 AirGap backup jobs are failing during the snapshot processing phase. The system is unable to complete the backup due to a persistent error.

The logs indicate an Access Denied error while attempting to assume a role via AWS STS (Security Token Service). This is typically due to:

An outdated CloudFormation stack, missing the latest permissions.

SCP (Service Control Policy) or IAM permission restrictions blocking necessary API calls.

- An outdated CloudFormation stack, missing the latest permissions.
- SCP (Service Control Policy) or IAM permission restrictions blocking necessary API calls.

<code>operation error EBS: ListSnapshotBlocks, failed to sign request: failed to retrieve credentials:</code>

<code>failed to refresh cached credentials, operation error STS: AssumeRole,</code>

<code>https response error StatusCode: 403, api error AccessDenied:</code>

<code>User: arn:aws:sts::839660473589:assumed-role/cr-prod-data-processing-role-ec2data-Role/i-0b3a330906c46a3d2 </code>

<code>is not authorized to perform: sts:AssumeRole on resource: </code>

<code>arn:aws:iam::673397230705:role/Druva-CloudRanger-Prod-CloudRangerDataRole-1LQL85241ABEW</code>

Confirm CloudFormation Template Version

- Check whether the customer's deployed stack is running the latest CloudFormation template provided by Druva.

- Validate that the IAM roles involved in the backup process have the required permissions to perform <code>sts:AssumeRole.</code>

Inspect SCPs or Organizational Restrictions

- Look for any Service Control Policies or IAM boundaries that might block the <code>sts:AssumeRole</code> or <code>ebs:ListSnapshotBlocks</code> permissions.

1. Confirm CloudFormation Template Version
 - Check whether the customer's deployed stack is running the latest CloudFormation template provided by Druva.
2. Review IAM Roles and Permissions
 - Validate that the IAM roles involved in the backup process have the required permissions to perform <code>sts:AssumeRole.</code>
3. Inspect SCPs or Organizational Restrictions
 - Look for any Service Control Policies or IAM boundaries that might block the <code>sts:AssumeRole</code> or <code>ebs:ListSnapshotBlocks</code> permissions.

- Request the customer to update their Druva CloudFormation stack to the latest version, which includes all necessary permissions.
- Refer to <a href="https://dell-help.druva.com/en/articles/8812686-how-to-create-or-update-the-cloudformation-stack">Documentation</a> for step-by-step upgrade instructions.

Check and Modify SCP or IAM Restrictions

- If updating the stack doesn't resolve the issue, verify and adjust any SCPs or IAM permission boundaries that may be preventing:
 - <code>sts:AssumeRole</code>
 - <code>ebs:ListSnapshotBlocks</code>
- Ensure the backup role has cross-account trust permissions configured correctly.

- Once the stack and permissions are corrected, reinitiate the AirGap backup job and monitor for success.

1. Update CloudFormation Stack
 - Request the customer to update their Druva CloudFormation stack to the latest version, which includes all necessary permissions.
 - Refer to <a href="https://dell-help.druva.com/en/articles/8812686-how-to-create-or-update-the-cloudformation-stack">Documentation</a> for step-by-step upgrade instructions.
2. Check and Modify SCP or IAM Restrictions
 - If updating the stack doesn't resolve the issue, verify and adjust any SCPs or IAM permission boundaries that may be preventing:
 - <code>sts:AssumeRole</code>
 - <code>ebs:ListSnapshotBlocks</code>
 - Ensure the backup role has cross-account trust permissions configured correctly.
3. Re-run the Backup Job
 - Once the stack and permissions are corrected, reinitiate the AirGap backup job and monitor for success.

EC2 AirGap backups are failing due to a persistent "Failed to ListSnapshotBlocksBasic" API error.

EC2 AirGap backups failed with "Failed to ListSnapshotBlocksBasic" API error.

Powered by Druva

Privacy Policy

Support

Knowledge Base

Find answers and get help from Intercom Support and Community Experts

This site employs cookies and other technologies that we and our third party vendors use to monitor and record personal information about you and your interactions with the site (including content viewed, cursor movements, screen recordings, and chat contents) for the purposes described in our Cookie Policy. By continuing to visit our site, you agree to our {websiteTermsLink}, {privacyPolicyLink} and {cookiePolicyLink}.

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

We use cookies to make our site work and also for analytics and advertising purposes. You can enable or disable optional cookies as desired. See our {cookiePolicyLink} for more details.

Advertising cookies are set by our advertising partners to collect information about your use of the site, our communications, and other online services over time and with different browsers and devices. They use this information to show you ads online that they think will interest you and measure the ads' performance. Social media cookies are set by social media platforms to enable you to share content on those platforms, and are capable of tracking information about your activity across other online services for use as described in their privacy policies.

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

These cookies are necessary for the website to function and cannot be switched off in our systems.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

You have the right to opt out of the sale of your personal information. See our {cookiePolicyLink} for more details about how we use your data.

Your Privacy Choices

We use cookies to enhance your experience. You can customize your cookie preferences below. See our {cookiePolicyLink} for more details.

Cookie Settings

Link, Press control-option-right-arrow to exit

Empty Help Center

Uh oh. That page doesn’t exist.

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

EC2 AirGap backups failed with "Failed to ListSnapshotBlocksBasic" API error.

Problem Description

Cause

Traceback

Verification

Resolution