S3 BackupStorageLocation AccessDenied

[BangShinChul]

Description:
I'm getting an Access Denied error on velero.
I followed the documentation below.
https://aws.amazon.com/blogs/containers/backup-and-restore-your-amazon-eks-cluster-resources-using-velero/

Currently using velero version :

Below are the AWS resources I created to configure velero.

VeleroAccessPolicy(IAM Policy)

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeVolumes",
                "ec2:DescribeSnapshots",
                "ec2:CreateTags",
                "ec2:CreateVolume",
                "ec2:CreateSnapshot",
                "ec2:DeleteSnapshot"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:DeleteObject",
                "s3:PutObject",
                "s3:AbortMultipartUpload",
                "s3:ListMultipartUploadParts"
            ],
            "Resource": [
                "arn:aws:s3:::924100457313-eks-velero-backups/*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::924100457313-eks-velero-backups"
            ]
        }
    ]
}

The above policy is attached to an IAM Role named eks-velero-backup, eks-velero-recovery. eks-velero-backup, eks-velero-recovery is mapped to the service account of velero.

As shown below

I have verified that the IAM Role and Policy that I set in IRSA method can access the S3 Bucket normally, but I still get AccessDenied error in velero.

Error Log:

time="2023-11-30T07:53:13Z" level=error msg="Error getting backup store for this location" backupLocation=velero/default controller=backup-sync error="rpc error: code = Unknown desc = WebIdentityErr: failed to retrieve credentials\ncaused by: ValidationError: Request ARN is invalid\n\tstatus code: 400, request id: e46709da-9096-4fc3-ae4e-a646387b34d0" error.file="/go/src/velero-plugin-for-aws/velero-plugin-for-aws/object_store.go:326" error.function=main.getSession logSource="pkg/controller/backup_sync_controller.go:100"
time="2023-11-30T07:53:13Z" level=error msg="Error getting a backup store" backup-storage-location=velero/default controller=backup-storage-location error="rpc error: code = Unknown desc = WebIdentityErr: failed to retrieve credentials\ncaused by: ValidationError: Request ARN is invalid\n\tstatus code: 400, request id: e47eccef-32b6-47a2-8b95-3c48675104f9" error.file="/go/src/velero-plugin-for-aws/velero-plugin-for-aws/object_store.go:326" error.function=main.getSession logSource="pkg/controller/backup_storage_location_controller.go:148"

time="2023-11-30T07:53:13Z" level=info msg="BackupStorageLocation is invalid, marking as unavailable" backup-storage-location=velero/default controller=backup-storage-location logSource="pkg/controller/backup_storage_location_controller.go:131"
time="2023-11-30T07:53:13Z" level=error msg="Current BackupStorageLocations available/unavailable/unknown: 0/0/1, BackupStorageLocation \"default\" is unavailable: rpc error: code = Unknown desc = WebIdentityErr: failed to retrieve credentials\ncaused by: ValidationError: Request ARN is invalid\n\tstatus code: 400, request id: e47eccef-32b6-47a2-8b95-3c48675104f9)" controller=backup-storage-location logSource="pkg/controller/backup_storage_location_controller.go:192"

What is causing this issue and how can I fix it? Thank you for your help.