Arq Backup Amazon S3/Glacier IAM

iam.json

{
  "Statement": [
    {
        "Effect": "Allow",
        "Action": ["s3:GetBucketLocation", "s3:ListAllMyBuckets"],
        "Resource": "arn:aws:s3:::*"
    },
    {
        "Effect": "Allow",
        "Action": ["s3:*"],
        "Resource": ["arn:aws:s3:::arq-*"]
    },
    {
        "Effect": "Allow",
        "Action": ["glacier:ListVaults"],
        "Resource": "arn:aws:glacier:*:*:vaults/*"
    },
    {
        "Effect": "Allow",
        "Action": ["glacier:*"],
        "Resource": "arn:aws:glacier:*:*:vaults/arq-*"
    }
  ]
}