Before creating an object-based backup repository, create an IAM-based user access key and secret, and create an S3 bucket with Object Lock enabled on the ECS system.

Create an IAM group

If you do not have an IAM group already created, create one as follows:

1. In the ECS management UI, select Identity and Access.
2. Select Groups > New Group.

For this test, we create a group with all access granted. For production systems, consider the correct level of access to be granted.

3. Specify a namespace.

For this test, we select an ECS namespace that does not have ADO enabled as the default because we want to use the Veeam immutability functionality with the buckets that we create. For more information about ECS namespaces, ADO, and immutable bucket creation on ECS, see the ECS Info Hub.

4. Give the group a name and click Next.

5. Give the group the following policies and click Next.

Note: You might want to restrict these policies in production.

6. Click Save.

In this example, we have created an ISM Group with policies that you might not want to grant in production.

Create an IAM user

Create an IAM user as follows:

1. Select the Users tab and click New User.

2. Enter a name for the user and click Next.

3. Select the group name to add the new user to the group, and then click Next.

4. Click Next and then, in the Add Tag form, click Next again.
5. Click Create User to create the IAM user.

ECS creates an access key ID and access secret key.

6. Make note of the access key ID and access secret key or click Download .csv to record them.

Once you leave this page, you cannot look up the secret key again.

7. Click Complete and return to the Veeam Backup & Replication management UI.