The way that you configure export-based backups for your Amazon RDS instances depends on your AWS deployment.
For AWS workloads, the configuration wizard includes a CloudFormation template that automatically creates a JSON policy that specifies AWS IAM permissions, and then attaches the policy to an IAM role or a user group. The policy contains permissions for all AWS workloads that are supported by Commvault Cloud. If certain AWS workloads are not in use, you can detach policies from the IAM role or user group.