Insufficient privilege when running AWS Backup start_copy_job fumction

Question

I'm trying to start a copy job to copy RDS snapshot from one backup vault to another backup vault in diferent region using lambda function but getting error with this message:

An error occurred (AccessDeniedException) when calling the StartCopyJob operation: Insufficient privileges to perform this action

function call is like this-

        result =conn.start_copy_job(RecoveryPointArn='my-arn',
            SourceBackupVaultName='my-vault',
            DestinationBackupVaultArn='my-dest-vault-arn',
            IamRoleArn='AWSBackupDefaultServiceRole')

Following permissions assigned to lambda role-

All resources   
Allow: backup:*
Allow: backup:CopyFromBackupVault
arn:aws:backup:*:*:backup-vault:*   
Allow: backup:DescribeBackupVault
Allow: backup:CopyIntoBackupVault

Could someone explain what I'm missing here?

Answer 1

I need to provide full arn of role AWSBackupDefaultServiceRole like

arn:aws:iam::12345678:role/AWSBackupDefaultServiceRole

    result =conn.start_copy_job(RecoveryPointArn='my-arn',
        SourceBackupVaultName='my-vault',
        DestinationBackupVaultArn='my-dest-vault-arn',
        IamRoleArn='arn:aws:iam::12345678:role/AWSBackupDefaultServiceRole')