title: IAM Policy to restore RDS from S3 Bucket not working
body: <p>I am trying to restore a snapshot in parquet format that is stored in S3. But I am getting the error</p>
  <p><strong>&quot;An error occurred (InvalidParameterValue) when calling the RestoreDBInstanceFromS3 operation: Files from the specified Amazon S3 bucket cannot be downloaded. Make sure that you have created an AWS Identity and Access Management (IAM) role that lets Amazon RDS access Amazon S3 for you.&quot;</strong>.</p>
  <p>Here is the IAM policy I created:</p>
  <pre><code>{
      &quot;Version&quot;: &quot;2012-10-17&quot;,
      &quot;Statement&quot;: [
          {
              &quot;Sid&quot;: &quot;ImportPolict&quot;,
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Action&quot;: [
                  &quot;s3:PutObject*&quot;,
                  &quot;s3:ListBucket&quot;,
                  &quot;s3:GetObject*&quot;,
                  &quot;s3:DeleteObject*&quot;,
                  &quot;s3:GetBucketLocation&quot;
              ],
              &quot;Resource&quot;: [
                  &quot;arn:aws:s3:::bucket-name&quot;,
                  &quot;arn:aws:s3:::bucket-name/*&quot;
              ]
          }
      ]
  }
  </code></pre>
  <p>Trusted relationship configured on the role:</p>
  <pre><code>{
    &quot;Version&quot;: &quot;2012-10-17&quot;,
    &quot;Statement&quot;: [
      {
        &quot;Effect&quot;: &quot;Allow&quot;,
        &quot;Principal&quot;: {
          &quot;Service&quot;: &quot;rds.amazonaws.com&quot;
        },
        &quot;Action&quot;: &quot;sts:AssumeRole&quot;
      }
    ]
  }
  </code></pre>
  <p>This is the command I am using: <code>aws rds restore-db-instance-from-s3 --allocated-storage 150 --db-instance-identifier instanceName --db-instance-class db.t2.medium --engine mysql --master-username user --master-user-password password --s3-bucket-name bucket-name --s3-ingestion-role-arn arnToRole --source-engine mysql --source-engine-version 5.6.44</code></p>
  <p>This user has access to the S3 Bucket and there is nothing configured on Bucket Policy</p>