ebs:CompleteSnapshot is a Write access-level action in the ebs service. Grants permission to seal and complete the snapshot after all of the required blocks of data have been written to it
ARNs that ebs:CompleteSnapshot can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants ebs:CompleteSnapshot.
Filters access by a tag key and value pair that is allowed in the request
Filters access by a tag key and value pair of a resource
Filters access by a list of tag keys that are allowed in the request
Filters access by the description of the snapshot being created
Filters access by the ARN of the parent snapshot
Filters access by the size of the volume for the snapshot being created, in GiB
A minimal policy that allows ebs:CompleteSnapshot. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowEbsCompleteSnapshot",
"Effect": "Allow",
"Action": "ebs:CompleteSnapshot",
"Resource": "*"
}
]
}